threat intel
The botnet you can't unplug: blockchain C2 in 2026
Attackers store malware C2 addresses on public blockchains where nobody can delete them. A roundup of 2026 campaigns, IOCs and what defenders can do.
Research
Original findings, disclosures and technical write-ups. Everything here is first-hand work.
phishing
Homograph phishing attacks in 2026
Almost every TLD registry now blocks mixed-script domains, but whole-script Cyrillic fakes and accented Latin lookalikes still slip through in .com.
redteam
In-situ recon: one device for RF capture and covert photography
How I ran a covert RF spectrum survey and interior photography from a single antenna pole during an authorized red team engagement.