Senior Threat Intelligence Reporter
Daniel tracks ransomware crews, initial access brokers and state-aligned intrusion sets. He previously worked as a SOC analyst and still writes his own detection rules.
181 articles
RansomwareForensic analysis of the data breach impacting Feds Suspect: initial access vector, exfiltrated telemetry, and regulatory disclosure mandates.
Crypto / Web3Forensic analysis of the security incident impacting From Uptober: smart contract mechanics, fund flows, and defensive hardening.
Data BreachForensic analysis of the data breach impacting Korean: initial access vector, exfiltrated telemetry, and regulatory disclosure mandates.
Crypto / Web3Forensic analysis of the security incident impacting AI: smart contract mechanics, fund flows, and defensive hardening.
Data BreachForensic analysis of the data breach impacting UK: initial access vector, exfiltrated telemetry, and regulatory disclosure mandates.
Crypto / Web3Forensic analysis of the security incident impacting BitMart: smart contract mechanics, fund flows, and defensive hardening.
Crypto / Web3Forensic analysis of the security incident impacting Kraken: smart contract mechanics, fund flows, and defensive hardening.
Data BreachForensic analysis of the data breach impacting Ninth Circuit: initial access vector, exfiltrated telemetry, and regulatory disclosure mandates.
Crypto / Web3Forensic analysis of the security incident impacting ZachXBT: smart contract mechanics, fund flows, and defensive hardening.
Data BreachForensic analysis of the data breach impacting DigiCert: initial access vector, exfiltrated telemetry, and regulatory disclosure mandates.
Data BreachForensic analysis of the data breach impacting NI: initial access vector, exfiltrated telemetry, and regulatory disclosure mandates.
Crypto / Web3Forensic analysis of the security incident impacting Binance: smart contract mechanics, fund flows, and defensive hardening.
Crypto / Web3Forensic analysis of the security incident impacting GOPAX: smart contract mechanics, fund flows, and defensive hardening.
Data BreachForensic analysis of the data breach impacting The Next: initial access vector, exfiltrated telemetry, and regulatory disclosure mandates.
Crypto / Web3Forensic analysis of the security incident impacting MetaMask: smart contract mechanics, fund flows, and defensive hardening.
Data BreachForensic analysis of the data breach impacting State: initial access vector, exfiltrated telemetry, and regulatory disclosure mandates.
Crypto / Web3Forensic analysis of the security incident impacting Chainalysis: smart contract mechanics, fund flows, and defensive hardening.
Data BreachForensic analysis of the data breach impacting DigiCert: initial access vector, exfiltrated telemetry, and regulatory disclosure mandates.
Crypto / Web3Forensic analysis of the security incident impacting Apache: smart contract mechanics, fund flows, and defensive hardening.
Data BreachForensic analysis of the data breach impacting Chainalysis: initial access vector, exfiltrated telemetry, and regulatory disclosure mandates.
Crypto / Web3Forensic analysis of the security incident impacting Chainalysis: smart contract mechanics, fund flows, and defensive hardening.
Threat IntelMARIADB-DROP-PACKAGE-PRIVESC in MariaDB Corporation MariaDB Server Access Control Subsystem (Access Control) allows remote attackers to trigger arbitrary c
VulnerabilityEU-DORA-REG-2022-2554 in European Supervisory Authorities (EBA, EIOPA, ESMA) Digital Operational Resilience Act (Regulation EU 2022/2554) (Information Disc
CiscoChina-nexus Volt Typhoon deployed a covert multi-hop mesh named 'Silent Train' to route zero-day exploits into Cisco SD-WAN and critical infrastructure.