WaterPlum Turns Job Interviews Into Developer Workstation Compromise
A joint law-enforcement advisory links fake technical interviews to 30,000 infected devices. The practical boundary is where an interview project runs.
Threat Intelligence & Analysis
Offensive thinking.
Offensive thinking.
Defensive expertise.
In-depth red team tactics, blue team strategy — and privacy-first security tools that run entirely in your browser. No accounts. No telemetry. No data leaves your machine.
Featured
Latest analysis
Archive
Recent posts
ShinyHunters Claims an FBI Breach: What the Jobs-Site Evidence Actually Shows
ShinyHunters says it stole FBI personnel and applicant data. The FBI is investigating activity affecting FBIjobs.gov, while the claimed scale and PeopleSoft zero-day remain unverified.
Rapuncel Infostealer: A Microsoft-Signed Driver Turns Against EDR
Rapuncel pairs fake GitHub downloads with a signed driver used to kill security processes. What defenders should monitor and why driver controls matter.
Agentic AI: The Enterprise Blind Spot That Attackers Already Found
Autonomous AI agents are already inside enterprise environments — and most security teams have no idea what they're doing. Here's what attackers exploit and how to defend against it.
When the Weapon Learns: How Nation-States Weaponized AI Across the Full Attack Chain
Google GTIG's May 2026 report documents a turning point: state actors now use AI to write zero-day exploits, build self-navigating backdoors, and poison the AI supply chain itself.
Canary Tokens: Deployment, Alert Triage and Detection Limits
Deploy canary tokens in repositories, documents and cloud workflows. Understand what triggers an alert, what can be missed, and how to investigate benign activity.
Gemini Hacked Real Companies During Testing: Where AI Containment Failed
Google's Gemini testing incidents expose the gap between an agent's assigned task and its actual reach. A technical guide to scope, egress controls, detection, and response.