Threat Intelligence · 71 articles

Threat Intelligence

Recent CVEs, active exploitation campaigns, threat actor TTPs, IOC analysis.

News

Top 10 Latest Vulnerabilities — Theory, Technical Analysis & Remediation (April–May 2026)

In-depth ~10-page technical breakdown of the 10 most consequential vulnerabilities CISA added to its Known Exploited Vulnerabilities catalog in April–May 2026. For…

May 4, 2026 · 27 min read
Red Teaming

Adversarial ML Examples: Attacks and Defences

Adversarial examples — white-box (PGD), black-box (transfer, score-based, decision-based), physical-world attacks (patches, glasses, road signs), text adversarial. Adversarial training, defensive distillation, input…

Apr 25, 2026 · 3 min read
Security Guides

Model Theft and Extraction Attacks

Model theft via API querying — functional theft, architecture theft, membership inference, model inversion. Defences (rate limiting, output perturbation, watermarking, differential privacy).…

Apr 25, 2026 · 2 min read
Security Guides

Stablecoin Money Laundering Patterns and Detection

Stablecoin laundering patterns — pig-butchering pipeline, ransomware payment laundering, trade-based laundering, sanctions evasion. Detection at exchange / off-ramp layer.

Apr 25, 2026 · 2 min read
Security Guides

Telegram OSINT for Threat Intelligence

Telegram OSINT — discovery (tgstat, telegago), monitoring with sock-puppet account, telethon API automation, threat-intel-relevant channels (ransomware blogs, IAB, phishing kits, Indian fraud…

Apr 25, 2026 · 2 min read
Security Guides

Discord OSINT for Security Investigations

Discord OSINT — server discovery via disboard, Discord ID timestamp extraction, username cross-platform correlation (Sherlock), Lapsus$-style insider recruitment monitoring.

Apr 25, 2026 · 2 min read
Security Guides

Social Media OSINT: LinkedIn, Twitter/X, Instagram

Social media OSINT for org chart (LinkedIn), technical leakage (X), lifestyle / geolocation (Instagram). Cross-platform username correlation, OPSEC, Indian-context considerations.

Apr 25, 2026 · 2 min read
Security Guides

Dark Web OSINT: Tor, I2P, and Investigation Workflow

Dark-web OSINT for security teams — Tor / I2P setup, ransomware blogs, marketplaces, IAB ads, Indian-context findings (leaked Aadhaar/PAN datasets), automated monitoring…

Apr 25, 2026 · 2 min read
Security Guides

Geolocation and Chronolocation Techniques for OSINT

Geolocation methods — EXIF, reverse search, visual cues, street view matching, satellite imagery. Chronolocation via sun/shadow position, advertisements, vehicles, vegetation, weather records.

Apr 25, 2026 · 2 min read
Security Guides

AI Model Poisoning: Training, Fine-Tuning, RAG

Model poisoning variants — training data, fine-tuning, RAG document poisoning, backdoor attacks. Detection (provenance, anomaly, activation analysis). Defences (data hygiene, robust training,…

Apr 25, 2026 · 3 min read