cybersecurity
Security writing in general: how attacks work and what defenders can do about them.
The Problem with “Attackers don’t break in, they log in”
“Attackers don’t break in, they log in” is a misleading half truth, and it shapes detection badly.
The Real Barrier to Machine-Speed Defence
Machine-speed attacks need machine-speed defence, but the real barrier is not the technology.
The C2 Trap
Detection engineering should start at the beginning of an attack, not the end. Why chasing C2 traffic is a trap.
Breakout Time

