Latest posts
-
OSINT for Corporate Security: Vendor Screening & Insider Risk
Corporate security has two very different risk surfaces to watch: who you let in the door, and who’s already inside. Vendor screening is about the first. Insider risk is about the second. Both have become significantly more dependent on open-source intelligence over the last few years, for the same underlying reason — self-reported questionnaires and…
-
How Insurance Claims Teams Are Using OSINT to Fight Fraud
The Coalition Against Insurance Fraud estimates fraud costs the US insurance industry roughly $308.6 billion a year, spread across healthcare, property and casualty, and workers’ compensation claims. That cost eventually lands on everyone else’s premiums, which is exactly why claims teams have spent the last decade building out a capability that used to belong almost…
-
OSINT and the War in Ukraine: How Open-Source Data Documents Conflict
Quick answer: The war in Ukraine, since February 2022, has become the most extensively documented conflict in history through open-source intelligence. Independent research groups such as Bellingcat and Oryx have used smartphone footage, satellite imagery, and geolocation techniques to verify equipment losses, map civilian harm, and build evidence archives that courts and journalists now rely…
-
The Incident Response Runbook We Use for Every Ransomware Case
The worst time to figure out your ransomware response process is during an actual ransomware incident. Decisions that should take minutes end up taking hours when nobody’s agreed in advance who calls what, who talks to whom, and in what order things happen. This is the runbook we actually use — not a theoretical framework,…
-
Building a SOC Dashboard in Under an Hour (Free Template)
Here’s the honest version of this promise before anything else: you can’t stand up a full SIEM from absolute zero and have a polished SOC dashboard running in under an hour. Installing Wazuh alone typically wants 4+ GB of RAM just for its indexer, and real build logs from people who’ve done this report wrestling…
-
Biometric Login: How Secure Is Fingerprint/Face ID?
Unlocking your phone with a glance or a touch feels almost magical compared to typing a passcode. It’s also become the default on nearly every phone sold today. But “convenient” and “secure” aren’t always the same thing, and biometric login raises a genuinely different set of questions than a password does — starting with the…
-
Setting Up Family Password Sharing Safely
Every family ends up sharing passwords eventually — the Wi-Fi, the streaming accounts, the shared bank login for household bills, or your kid’s school portal. The problem is how most families actually do it: a sticky note on the fridge, a shared notes app, or a group text that never gets deleted. All three are…
-
This Week in Cyber: 5 Attacks You Need to Know About
Quick answer: The five biggest cybersecurity stories this week (September 22-29, 2026) were: Citrix NetScaler zero-days exploited before a patch existed, ShinyHunters’ claimed breach of the FBI’s applicant portal, a Pentagon data breach exposing records on 3 million people, an AI-directed campaign (Storm-3168) that used compromised Azure service principals to mass-delete cloud resources, and an…
-
MITRE ATT&CK Cheat Sheet: The 10 Techniques SOCs See Most
The full MITRE ATT&CK matrix has hundreds of techniques and sub-techniques across 14 tactics, and it’s easy to get lost in it. In practice, most SOC investigations keep circling back to the same handful of techniques, just recombined in different attack chains. This is a working cheat sheet — the 10 techniques that show up…
-
Crypto & Financial OSINT: Tracing Money on the Blockchain
Cryptocurrency has a reputation for being untraceable, and that reputation is mostly wrong. Most major blockchains are public ledgers: every transaction, amount, and timestamp is visible to anyone. What’s hidden is identity, not activity. That difference, pseudonymous rather than anonymous, is the entire basis of blockchain investigation, and it’s why following the money on-chain has…