Acuity Health: Part 2 — Zero Trust DevSecOps & NIST SSDF
How to build an isolated, Zero Trust development architecture using ephemeral runners, proxy-scanned package caches, and NIST SP 800-218 practices without slowing engineering velocity.
Supply Chain Security
Supply Chain Cyber Attack Investigation: Root Cause Analysis, Impact Scoping, and Remediation
In late 2024, 1inch, a leading decentralized exchange (DEX), became one of several organizations indirectly impacted by a sophisticated supply chain attack on the open-source Lottie Player web component. The attacker did…
Post-Exploitation Detection and Network Reconnaissance Signature Analysis
Open-source tools used by attackers are often the same tools defenders rely on for network visibility, troubleshooting, and validating security controls. This dual-use nature creates both risk and opportunity. Attackers …
Open Source Intelligence (OSINT) and Mobile Telemetry for Blue Team Defense
Protecting an enterprise environment requires defenders to think like attackers. One of the best ways to prepare defenses is to anticipate how adversaries can gather and leverage publicly available information, exploit u…
Honeypots and Deception Technologies: Strategic Attacker Disruption and Early Warning
Honeypot and deception methodologies, along with the technologies designed to implement them for proactive defense, have gained popularity in recent years. Understanding the threat landscape is one of the most fundamenta…
The Blue Team Mindset: Active Defense, Telemetry Engineering, and Defensive Posture
Cybersecurity today is defined by a dynamic contest between defenders and adversaries. Organizations operate in an environment where advanced persistent threats, ransomware, and supply-chain compromises continually chall…