Opinion

Two Kinds of Bot 2 min read

Ukraine struck three of Yandex’s five data centres from 8 October. Within days a Cloudflare chart was circulating as proof that Russian bot networks had gone dark, and President Zelensky …

Orchestration Has No ATT&CK ID 5 min read

MITRE ATT&CK can tell you an attacker dumped credentials (T1003) and moved laterally over SSH (T1021). It cannot tell you those two steps were chosen, sequenced, and executed by an AI agent with …

The Kernel's New Rules for AI Bug Reports 3 min read

When Linus Torvalds released Linux 7.1-rc4 on May 17, he flagged a documentation update as the highlight. The substance is a policy: the kernel’s security workflow is being restructured to cope …

Behind the LLM Cybersecurity Hype 4 min read

The same vendors publishing breakthrough numbers on LLM cyber capability are publishing the disclaimers in the same posts. Read both halves and the picture changes.

2025 Top 20 Chinese Cybersecurity Enterprises 6 min read

On December 29, 2025, the Internet Society of China (中国互联网协会, ISC, an industry association affiliated with MIIT) published the China Internet Enterprise Comprehensive Strength Index (2025). Buried in …

Anatomy of the One Fox Toolkit 3 min read

When EclecticIQ analyzed a 2023 Cobalt Strike intrusion at Taiwan’s Directorate General of Highways (MOTC), the most useful artifact wasn’t the malware. It was a filesystem path leaked in …