// threat intel · ai agents · the stuff that breaks
Threat intelligence, AI agents, and the stuff that breaks when you mix them. Ten years of watching the same fight, written down as I go.
// latest dispatch
Thirteen years ago the operator of the most 'anonymous' market on the internet was arrested in a public library with his laptop open. He found out what the word actually means.
Timewarp #1: Yahoo at ten, and the dump that got almost everything wrong. The dark web listing that forced Yahoo's hand was wrong about almost everything, and that is why it worked.
A ransomware crew is selling incident response to the companies it just attacked. The audacity is impressive. The packaging is the actually interesting part.
// about
I lead a threat intelligence research team of nine. I spend my time watching how threat actors actually operate, and building agents that help me do it.
Learn more{
"focus": [
"threat actors",
"threat intelligence",
"agentic ai",
"the human layer"
],
"writes_about": "what i actually know",
"filler": false
}