// threat intel · ai agents · the stuff that breaks
Threat intelligence, AI agents, and the stuff that breaks when you mix them. Ten years of watching the same fight, written down as I go.
// latest dispatch
Timewarp #1: Yahoo at ten, and the dump that got almost everything wrong. The dark web listing that forced Yahoo's hand was wrong about almost everything, and that is why it worked.
A ransomware crew is selling incident response to the companies it just attacked. The audacity is impressive. The packaging is the actually interesting part.
I stopped writing here for a while. Here is the honest reason why, and what I am going to do about it.
// about
I lead a threat intelligence research team of nine. I spend my time watching how threat actors actually operate, and building agents that help me do it.
Learn more{
"focus": [
"threat actors",
"threat intelligence",
"agentic ai",
"the human layer"
],
"writes_about": "what i actually know",
"filler": false
}