Threat Intelligence
Recent CVEs, active exploitation campaigns, threat actor TTPs, IOC analysis.
Salt Typhoon — How a PRC APT Mapped the US Telecom Backbone (and What Indian Carriers Should Steal From It)
Salt Typhoon (UNC2286 / GhostEmperor) sat inside US telecom carriers for 18+ months exploiting Cisco IOS XE CVE-2023-20198. Technical breakdown of Demodex…
NewsTop 10 Latest Vulnerabilities — Theory, Technical Analysis & Remediation (April–May 2026)
In-depth ~10-page technical breakdown of the 10 most consequential vulnerabilities CISA added to its Known Exploited Vulnerabilities catalog in April–May 2026. For…
Red TeamingAdversarial ML Examples: Attacks and Defences
Adversarial examples — white-box (PGD), black-box (transfer, score-based, decision-based), physical-world attacks (patches, glasses, road signs), text adversarial. Adversarial training, defensive distillation, input…
Security GuidesModel Theft and Extraction Attacks
Model theft via API querying — functional theft, architecture theft, membership inference, model inversion. Defences (rate limiting, output perturbation, watermarking, differential privacy).…
Security GuidesDark Web OSINT: Tor, I2P, and Investigation Workflow
Dark-web OSINT for security teams — Tor / I2P setup, ransomware blogs, marketplaces, IAB ads, Indian-context findings (leaked Aadhaar/PAN datasets), automated monitoring…
Security GuidesGeolocation and Chronolocation Techniques for OSINT
Geolocation methods — EXIF, reverse search, visual cues, street view matching, satellite imagery. Chronolocation via sun/shadow position, advertisements, vehicles, vegetation, weather records.
Security GuidesAI Model Poisoning: Training, Fine-Tuning, RAG
Model poisoning variants — training data, fine-tuning, RAG document poisoning, backdoor attacks. Detection (provenance, anomaly, activation analysis). Defences (data hygiene, robust training,…
Blue TeamATM and POS Skimming Investigations in 2026
ATM / POS skimming variants in 2026 — overlay devices, deep-insert skimmers, POS terminal manipulation, Magecart e-commerce skimming. Detection SQL queries, investigation…
Blue TeamInsider Threat in Indian BFSI: Detection, UEBA, HR Coordination
Insider threat categories (malicious, negligent, compromised, departed). Detection SQL queries for anomalous access and outbound. UEBA + DLP + HR/Legal coordination workflow.…
Blue TeamCredit Card Fraud Detection at Scale: Rules + ML in Real-Time
Credit card fraud detection pipeline at issuer-bank scale — rule engine high-leverage rules, ML feature engineering, challenge mechanism, RBI Customer Protection alignment,…