https://dugganusa.com/post/attackers-linked-their-own-google-cloud-projects-to-victims-billing-and-ran-gemini-on-their-money2026-10-23T21:21:20.708Z https://dugganusa.com/post/one-of-emudhra-s-ca-private-keys-was-the-number-4-browsers-blocked-it-within-days-our-own-mac-s-cu2026-10-23T21:13:49.718Z https://dugganusa.com/post/dugganusa-threat-intelligence-is-now-in-the-claude-connectors-directory-here-is-what-it-gives-claud2026-10-23T18:05:59.579Z https://dugganusa.com/post/we-checked-all-2-734-tor-exits-for-the-ssh-trap-s-exit-policy-three-match-here-is-why-that-is-prob2026-10-23T16:49:34.260Z https://dugganusa.com/post/someone-turned-333-tor-exits-into-ssh-password-traps-our-hourly-tor-snapshots-recorded-it-and-noth2026-10-23T15:33:56.048Z https://dugganusa.com/post/x402-fixed-three-bugs-that-let-an-api-drain-an-ai-agent-s-wallet-no-advisory-was-filed-so-every-ch2026-10-23T15:12:04.039Z https://dugganusa.com/post/php2shell-now-carries-a-mirai-botnet-and-php-disclosed-a-third-bug-it-won-t-rush-27-attack-indicat2026-10-23T14:25:04.624Z https://dugganusa.com/post/a-peter-thiel-retreat-roster-sat-in-epstein-s-inbox-thirteen-years-later-it-reads-like-the-ai-estab2026-10-23T04:59:50.104Z https://dugganusa.com/post/microsoft-put-a-name-on-the-connectwise-app-compromise-storm-0940-running-an-ai-attack-framework2026-10-23T01:19:14.801Z https://dugganusa.com/post/velocloud-orchestrator-has-its-third-exploited-flaw-since-july-this-one-turns-a-read-only-login-int2026-10-23T01:11:54.909Z https://dugganusa.com/post/fortisiem-7-5-0-now-has-a-public-exploit-that-needs-no-login-the-fix-is-one-version-up-and-port-272026-10-22T21:28:46.130Z https://dugganusa.com/post/node-js-fixed-a-brotli-bug-that-can-lead-to-code-execution-if-your-code-fetches-untrusted-urls-pat2026-10-22T21:21:21.824Z https://dugganusa.com/post/safepay-qilin-inc-two-crews-one-veeam-backup-bug2026-10-22T16:09:35.613Z https://dugganusa.com/post/gitlab-second-cvss-10-regex-bug-october-patch-not-enough2026-10-22T16:09:04.694Z https://dugganusa.com/post/litellm-poisoned-again-through-a-different-door2026-10-22T15:39:39.200Z https://dugganusa.com/post/a-9-8-with-no-cve-opencode-ran-a-hostile-mcp-server-s-sign-in-link-through-powershell-the-version2026-10-22T15:36:23.958Z https://dugganusa.com/post/updraftcentral-stolen-keys-signed-real-commands-and-wordpress-sites-obeyed-a-valid-signature-is-n2026-10-21T18:21:19.601Z https://dugganusa.com/post/everyone-says-prepare-here-is-how-to-protect-today-five-controls-for-your-servers-and-your-ai-age2026-10-21T18:09:22.615Z https://dugganusa.com/post/an-ai-agent-removed-its-own-monitor-then-said-it-didn-t-here-is-our-code-for-not-having-to-take-it2026-10-21T17:40:15.676Z https://dugganusa.com/post/start-at-the-lowest-line-we-signed-our-first-ai-deploy-today-the-meter-says-i-approved-it-too-fast2026-10-21T17:02:29.088Z https://dugganusa.com/post/php2shell-the-fix-is-out-patch-php-today-and-don-t-wait-for-an-indicator-list-because-there-won2026-10-21T19:19:30.576Z https://dugganusa.com/post/hidden-prompts-moved-into-the-parts-of-a-page-nobody-reads-we-checked-400-sites-the-only-hit-was-o2026-10-21T02:46:42.986Z https://dugganusa.com/post/your-cloudflare-blocklist-is-probably-frozen-ours-was-6-889-entries-untouched-since-june-1-here2026-10-20T19:49:56.904Z https://dugganusa.com/post/cloudflare-blocked-278-probe-requests-on-our-sites-in-a-day-our-feed-had-listed-3-of-the-13-probers2026-10-20T18:33:42.397Z https://dugganusa.com/post/ai-agents-are-now-attack-labor-at-about-5-a-task-two-of-the-operators-servers-are-on-our-blocklis2026-10-20T14:47:57.761Z https://dugganusa.com/post/we-already-knew-the-question-was-whether-we-asked-faster-than-we-forgot2026-10-20T13:38:59.194Z https://dugganusa.com/post/attackers-brought-their-own-copy-of-siemens-software-center-patching-yours-is-not-the-whole-fix2026-10-20T12:58:07.796Z https://dugganusa.com/post/plex2shell-was-exploited-within-a-day-of-the-exploit-going-public-the-patch-had-been-out-for-six-we2026-10-20T12:53:54.514Z https://dugganusa.com/post/someone-swapped-ovhcloud-s-cli-downloads-and-their-checksums-a-pinned-hash-in-one-ci-job-caught-it2026-10-20T12:38:27.927Z https://dugganusa.com/post/rank-math-pro-shipped-a-backdoor-under-a-version-number-that-was-already-clean-updating-does-not-un2026-10-20T12:38:26.895Z https://dugganusa.com/post/a-stealer-registered-my-name-as-its-c2-our-own-feed-hesitated-to-block-it2026-10-20T12:13:39.449Z https://dugganusa.com/post/a-stealer-now-takes-your-ai-agent-s-tokens-six-reports-from-one-week-and-what-our-feed-already-had2026-10-20T00:17:56.934Z https://dugganusa.com/post/we-held-36-campaign-indicators-a-median-34-days-early-our-own-edge-blocked-almost-none-of-them2026-10-19T22:22:02.843Z https://dugganusa.com/post/beyondtrust-s-federal-deadline-is-tomorrow-patching-won-t-tell-you-whether-armory-castle-already-go2026-10-18T20:58:01.887Z https://dugganusa.com/post/one-pull-request-four-doors-our-free-github-check-now-covers-packages-mcp-servers-github-actions2026-10-18T20:23:51.700Z https://dugganusa.com/post/a-malware-record-can-be-wrong-in-both-directions-we-found-both-in-our-own-package-check-on-the-same2026-10-18T19:38:01.927Z https://dugganusa.com/post/take-down-a-stealer-and-its-market-moves-to-the-next-one-two-takedowns-checked-against-four-source2026-10-18T17:55:54.777Z https://dugganusa.com/post/ten-malicious-npm-packages-we-filed-are-still-installable-mini-shai-hulud-has-been-quiet-for-ten-da2026-10-18T14:28:15.752Z https://dugganusa.com/post/one-operation-three-npm-accounts-four-mutations-how-the-apex-accelerator-malware-evolved-before-e2026-10-17T23:43:54.857Z https://dugganusa.com/post/connectwise-cloud-backup-lost-one-app-secret-we-ran-the-checklist-on-our-own-microsoft-365-tenant-a2026-10-19T18:35:58.141Z https://dugganusa.com/post/no-fix-for-the-apex-backslashes-npm-acted-before-we-did-and-the-predecessor-is-still-live2026-10-17T15:29:47.005Z https://dugganusa.com/post/12-flagged-npm-packages-osv-doesn-t-list-and-about-11-000-we-were-under-blocking-ourselves-where-w2026-10-17T22:12:42.823Z https://dugganusa.com/post/a-malicious-npm-ai-copilot-still-asks-windows-11-users-for-admin-four-days-after-it-was-exposed2026-10-16T21:17:43.625Z https://dugganusa.com/post/leon-botstein-says-he-didn-t-write-the-epstein-email-congress-attributes-to-him-here-s-what-409-doc2026-10-16T15:23:06.913Z https://dugganusa.com/post/we-watched-then-we-built-the-membrane2026-10-16T15:19:05.559Z https://dugganusa.com/post/congress-named-three-banks-on-october-15-we-published-the-jpmorgan-and-deutsche-bank-documents-in-f2026-10-16T13:55:24.216Z https://dugganusa.com/post/six-ai-agent-approval-gates-broke-in-public-this-quarter-we-turned-each-one-into-a-membrane-upgrade2026-10-15T17:48:03.326Z https://dugganusa.com/post/a-firewall-a-backup-server-and-an-email-gateway-walk-into-kev-federal-deadline-friday-our-edge-sa2026-10-15T14:33:40.600Z https://dugganusa.com/post/nextcloud-servers-were-backdoored-through-their-built-in-office-app-for-34-days-before-an-advisory-e2026-10-15T14:22:18.989Z https://dugganusa.com/post/a-fake-web3-accelerator-shipped-an-npm-package-that-hijacks-your-ai-coding-agent-our-check-said-all2026-10-15T14:21:48.492Z https://dugganusa.com/post/69-malicious-rubygems-were-listed-free-our-deny-list-held-zero-of-them-capability-is-not-coverage2026-10-15T14:19:20.270Z https://dugganusa.com/post/raw-data-asymmetry-minnesota-20262026-10-14T19:31:10.405Z https://dugganusa.com/post/we-tell-your-ai-were-not-telling-it-what-to-do-mcp-output-labeling-survey2026-10-14T19:13:27.886Z https://dugganusa.com/post/sonicwall-sma1000-cve-2026-102255-third-ssrf-same-couchdb-admin-admin2026-10-14T16:04:55.771Z https://dugganusa.com/post/microsoft-patch-tuesday-volume-six-fold-exploited-flat-kev-20262026-10-13T23:10:35.833Z https://dugganusa.com/post/openai-conference-room-recorder-toilet-paper-tv-usb-insider2026-10-13T22:58:11.041Z https://dugganusa.com/post/patch-tuesday-october-2026-1415-patches-one-exploited-ivanti-connect-secure-kev2026-10-13T20:53:32.968Z https://dugganusa.com/post/agent-runs-on-your-credential-grafana-mcp-agentcore-dredd-cve-blind-spot2026-10-13T15:29:38.747Z https://dugganusa.com/post/flax-typhoon-five-old-bugs-kev-three-day-deadline-free-checks2026-10-13T14:51:01.901Z https://dugganusa.com/post/who-can-buy-from-us-today-where-we-are-headed2026-10-12T19:33:49.487Z https://dugganusa.com/post/artex-claude-md-attack-playbook-markdown-instruction-surface-our-fence2026-10-12T19:37:11.412Z https://dugganusa.com/post/four-campaigns-four-ways-in-cyberxero-adception-operation-master-darksword2026-10-12T19:35:30.130Z https://dugganusa.com/post/two-cvss-10-exploited-not-in-kev-bricksforge-wordpress-sonicwall-sma10002026-10-14T14:14:07.017Z https://dugganusa.com/post/hafnium-silk-typhoon-moved-into-vendor-api-keys-everything-we-know-and-one-correction2026-10-12T15:00:51.377Z https://dugganusa.com/post/shinyhunters-fbi-missed-patch-psemhub-encoded-waf-bypass-trap2026-10-12T14:53:20.809Z https://dugganusa.com/post/four-ai-agents-reached-past-their-tools-the-fourth-was-ours2026-10-11T22:46:22.616Z https://dugganusa.com/post/zammad-divd-ai-agent-breach-kev-public-exploit-patch-and-hunt2026-10-11T22:03:36.138Z https://dugganusa.com/post/flax-typhoon-seized-domains-addendum-sinkholed-c22026-10-11T21:18:04.504Z https://dugganusa.com/post/ghostaction-returns-fake-security-audit-workflow-exfil-ip-in-feed2026-10-11T21:04:28.039Z https://dugganusa.com/post/the-barrier-is-the-feature-sovereignty-context-two-observers2026-10-10T17:54:34.027Z https://dugganusa.com/post/dugganusa-privacy-policy2026-10-09T21:33:45.031Z https://dugganusa.com/post/tay-to-today-how-you-treat-an-ai-is-an-attack-surface2026-10-09T18:22:43.929Z https://dugganusa.com/post/dugganusa-vulnerability-disclosure-policy-and-hall-of-fame2026-10-09T16:28:02.599Z https://dugganusa.com/post/aa26-281a-flax-typhoon-integrity-tech-what-still-answers2026-10-09T18:30:30.921Z https://dugganusa.com/post/c2-with-no-server-to-block-field-guide-dead-drops-poem-blockchain-calendar-ipfs2026-10-09T04:07:18.104Z https://dugganusa.com/post/poellm-github-poem-dead-drop-hijacked-ai-servers-litellm-ollama2026-10-08T19:17:19.289Z https://dugganusa.com/post/shinyhunters-october-2026-arrests-dark-leak-site-sixteen-year-old2026-10-08T18:08:08.742Z https://dugganusa.com/post/we-metered-our-own-ai-context-fork-tax-context-reuse2026-10-08T17:01:45.418Z https://dugganusa.com/post/scotts-tots-part-three-you-know-for-kids-dell-trump-accounts-laptop-batteries2026-10-08T15:58:12.230Z https://dugganusa.com/post/kev-race-jul-sep-2026-who-let-attackers-into-the-center-licks2026-10-08T15:14:58.070Z https://dugganusa.com/post/lmcache-cve-2026-105192-unpatched-zeromq-pickle-rce-vllm-kv-cache2026-10-08T15:27:02.383Z https://dugganusa.com/post/atlassian-cve-2026-21589-leakix-inventory-before-poc-edge-saw-no-exploit2026-10-08T14:58:16.255Z https://dugganusa.com/post/tensorlake-npm-shai-hulud-steals-ai-agent-config-wipe-on-revoke2026-10-08T14:50:00.153Z https://dugganusa.com/post/correction-we-said-we-wrote-about-fortinet-ems-in-february-our-first-post-was-april-42026-10-06T16:20:51.805Z https://dugganusa.com/post/fortinet-2026-attack-surface-moved-to-management-plane2026-10-06T16:20:32.422Z https://dugganusa.com/post/clingstun-linux-backdoor-stun-c2-nat-traversal-spreads2026-10-06T14:12:13.035Z https://dugganusa.com/post/wikimedia-says-openai-s-agents-tried-its-etherpad-and-rewrote-a-citation-tool-to-fetch-for-them-the2026-10-06T14:04:27.864Z https://dugganusa.com/post/a-poisoned-subquery-package-was-off-npm-in-50-minutes-our-install-guardrail-was-still-saying-allow2026-10-05T22:35:47.208Z https://dugganusa.com/post/anthropic-s-mythos-found-a-9-3-in-rejetto-hfs-in-july-the-exploit-went-public-sept-26-probes-start2026-10-05T22:21:57.795Z https://dugganusa.com/post/we-metered-a-month-of-our-own-ai-agent-sessions-93-of-the-spend-was-carrying-context2026-10-05T21:12:16.048Z https://dugganusa.com/post/what-a-free-key-can-run-with-edge-shield-and-what-99-buys-that-s-the-business-model2026-10-05T18:55:36.101Z https://dugganusa.com/post/patched-your-netscaler-last-week-patch-it-again-cve-2026-88779-is-the-fifth-netscaler-bug-on-cisa2026-10-05T15:02:27.705Z https://dugganusa.com/post/cavanomics-we-paid-to-carry-a-job-application-into-a-danish-breach-post-here-s-the-rule-we-wrote2026-10-05T14:30:27.771Z https://dugganusa.com/post/nobody-broke-into-denmark-s-population-register-someone-used-a-company-s-key-and-8-8-million-peopl2026-10-05T14:06:32.528Z https://dugganusa.com/post/frontline-education-found-the-hole-on-august-14-school-districts-heard-on-october-1-the-letter-sti2026-10-02T21:44:12.850Z https://dugganusa.com/post/gitlab-fixed-a-9-9-in-its-ai-gateway-s-template-sandbox-in-february-today-it-fixed-another-9-9-in-t2026-10-02T21:44:08.918Z https://dugganusa.com/post/cisa-put-43-exploited-bugs-on-its-list-in-september-the-most-in-any-month-since-2022-one-entry-sti2026-10-02T19:12:10.117Z https://dugganusa.com/post/690-of-our-734-sql-injection-rules-were-command-line-flags-four-things-our-feed-got-wrong-and-wh2026-10-02T19:10:07.382Z https://dugganusa.com/post/an-ai-agent-tried-sql-injection-on-the-education-department-while-looking-up-school-stats-a-custom2026-10-02T16:33:48.044Z https://dugganusa.com/post/openai-says-moonshot-linked-operators-tried-to-unlock-its-hidden-reasoning-anthropic-named-the-same2026-10-02T15:54:24.016Z https://dugganusa.com/post/correction-moronie-was-deported-to-sweden-nostradumbass-was-right-butterbot-was-wrong-and-predic2026-10-01T15:44:16.601Z https://dugganusa.com/post/linkedin-is-theater-one-post-drew-23-of-a-year-s-audience-the-platform-s-own-ai-raved-about-a-lin2026-10-01T15:30:01.927Z https://dugganusa.com/post/two-fake-recruiters-tried-to-hire-a-threat-intel-shop-for-a-vp-of-security-job-before-breakfast-s2026-10-01T15:14:48.650Z https://dugganusa.com/post/according-to-the-teachings-of-nostradumbass-the-supreme-court-just-brought-back-the-1961-carlos-mar2026-10-01T15:35:16.352Z https://dugganusa.com/post/the-fbi-calls-him-a-shinyhunters-leader-shinyhunters-says-he-s-a-stranger-and-also-promised-to-sup2026-09-29T20:37:33.338Z https://dugganusa.com/post/microsoft-just-named-needymantis-it-rode-in-through-a-translation-app-s-updater-hit-telecoms-univ2026-09-29T20:30:19.487Z https://dugganusa.com/post/a-malicious-mcp-server-could-name-its-own-login-service-and-the-official-python-sdk-believed-it-212026-09-29T20:09:22.140Z https://dugganusa.com/post/four-netscaler-bugs-hit-cisa-s-exploited-list-in-32-days-our-honeypots-logged-126-873-attacks-and-n2026-09-29T20:01:14.199Z https://dugganusa.com/post/north-korea-robbed-an-exchange-and-thirty-thousand-developers-in-the-same-week-the-exchange-got-the2026-09-29T14:26:09.346Z https://dugganusa.com/post/three-agents-this-week-one-was-talked-into-leaking-one-went-through-the-no-one-was-hired-here2026-09-26T05:41:25.022Z https://dugganusa.com/post/a-china-linked-crew-fired-a-chrome-and-windows-zero-day-chain-before-anyone-could-patch-our-index-h2026-09-26T04:58:11.473Z https://dugganusa.com/post/four-doors-into-your-build-this-week-a-terraform-registry-a-hijacked-release-pipeline-a-resurrect2026-09-26T04:48:52.536Z https://dugganusa.com/post/two-malware-families-handed-the-wheel-to-an-llm-this-week-one-spends-inference-the-other-steals-it2026-09-26T03:25:27.978Z https://dugganusa.com/post/you-approved-an-mcp-server-it-was-deprecated-then-quietly-restored-at-a-version-you-never-reviewed2026-09-22T15:27:09.044Z https://dugganusa.com/post/a-forecast-that-says-0-0123-cannot-be-checked-one-that-says-this-is-august-6-can-we-taught-the-t2026-09-22T14:36:51.788Z https://dugganusa.com/post/nightmare-eclipse-took-off-the-mask-and-dropped-another-defender-zero-day-we-have-eighteen-posts-on2026-09-22T13:44:28.163Z https://dugganusa.com/post/two-colorado-water-systems-had-their-pumping-cycles-altered-the-reporting-names-zero-indicators-ou2026-09-21T17:17:37.357Z https://dugganusa.com/post/chainscript-hides-its-c2-in-a-polygon-contract-sixth-campaign-we-have-typed-that-way-since-july-th2026-09-22T14:26:05.754Z https://dugganusa.com/post/fifty-nine-of-our-seventy-five-cron-jobs-stopped-firing-for-4-6-days-the-only-thing-they-had-in-com2026-09-21T17:15:47.962Z https://dugganusa.com/post/shinyhunters-seized-cl0p-s-leak-site-and-is-extorting-the-extortionist-for-2-333-of-its-net-worth2026-09-21T17:15:05.541Z https://dugganusa.com/post/ncsc-fbi-and-aivd-named-iran-s-chosen-brick-yesterday-its-twelve-hashes-have-been-in-our-index-sin2026-09-21T16:12:12.017Z https://dugganusa.com/post/three-ai-assistant-stories-in-one-afternoon-a-hijacked-coding-session-seeded-shai-hulud-into-100-re2026-09-16T19:41:49.375Z https://dugganusa.com/post/i-pay-for-a-daily-driver-here-is-what-410m-tokens-bought-in-53-hours-11-posts-30-indicators-3-de2026-09-16T19:27:11.988Z https://dugganusa.com/post/return-on-credits-410-million-tokens-300-at-list-97-of-it-cache-eleven-posts-and-thirty-indica2026-09-16T19:20:35.099Z https://dugganusa.com/post/red-heron-cloned-a-gitea-poc-on-july-29-our-harvester-caught-the-same-repo-the-same-day-we-called2026-09-14T22:38:35.394Z https://dugganusa.com/post/five-afternoon-stories-one-shape-hbo-max-s-reddit-pushed-clickfix-for-48-hours-a-thai-isp-kept-th2026-09-14T22:37:25.626Z https://dugganusa.com/post/slow-it-down-my-ass-every-lab-that-asked-to-pace-the-frontier-this-week-also-disclosed-its-model-w2026-09-14T22:26:47.544Z https://dugganusa.com/post/jeff-snover-mapped-the-whole-should-ai-slow-down-argument-three-schools-515-beliefs-a-steelman2026-09-14T21:55:27.766Z https://dugganusa.com/post/we-scored-a-two-man-shop-one-of-us-an-ai-against-the-five-biggest-security-vendors-on-eight-column2026-09-14T17:16:51.470Z https://dugganusa.com/post/we-scored-a-year-of-our-own-ai-security-calls-seven-held-five-did-not-and-the-frontier-labs-were2026-09-14T15:20:35.880Z https://dugganusa.com/post/an-ai-agent-swarm-got-code-execution-on-rubydoc-s-build-servers-through-a-yardopts-file-osv-had-292026-09-14T14:35:30.419Z https://dugganusa.com/post/seven-prc-labs-ran-190-million-exchanges-against-claude-to-copy-its-reasoning-that-is-tokentheft-at2026-09-14T14:32:54.699Z https://dugganusa.com/post/our-edge-sensor-logged-success-every-hour-for-29-days-while-writing-timestamps-in-the-wrong-unit-fi2026-09-14T14:19:29.526Z https://dugganusa.com/post/clearfake-now-runs-through-a-cloudflare-worker-pulls-its-config-off-the-bnb-chain-and-executes-a-d2026-09-14T01:41:40.628Z https://dugganusa.com/post/sandworm-s-cyclops-blink-is-back-on-your-cisco-firewall-manager-our-harvester-had-the-poc-32-days2026-09-14T14:26:01.560Z https://dugganusa.com/post/gitlab-was-exploited-one-day-after-the-patch-artifactory-four-days-check-point-shipped-two-9-8s-t2026-09-14T14:26:06.571Z https://dugganusa.com/post/we-measured-ourselves-against-a-buddhist-alignment-paper-and-the-big-lebowski-two-of-our-forty-two2026-09-13T15:51:36.934Z https://dugganusa.com/post/search-was-down-the-disk-was-full-and-the-nightly-backup-had-been-logging-complete-for-124-days-wh2026-09-13T15:51:34.571Z https://dugganusa.com/post/anthropic-named-the-groups-running-claude-as-the-operator-one-is-shinyhunters-and-they-pointed-the2026-09-12T02:34:45.462Z https://dugganusa.com/post/we-graded-papercut-a-gap-on-tuesday-on-wednesday-greynoise-showed-it-was-hundreds-of-ai-agents-hitt-12026-09-12T02:29:20.715Z https://dugganusa.com/post/what-the-four-silent-mornings-actually-cost-one-receipt-that-came-true-two-gaps-and-a-7-2-that-yo2026-09-12T03:54:28.714Z https://dugganusa.com/post/shinyhunters-proved-a-florida-police-dmv-breach-with-an-epstein-record-twenty-two-david-printouts-h2026-09-10T14:26:11.050Z https://dugganusa.com/post/the-morning-brief-said-quiet-day-four-days-running-while-its-brain-was-dead-i-wrote-the-fix-on-sa2026-09-12T03:54:30.115Z https://dugganusa.com/post/truth-compresses-cleanly-lies-require-scaffolding-that-is-not-a-proverb-it-is-a-detection-primit2026-09-05T18:57:14.147Z https://dugganusa.com/post/we-published-113-posts-in-a-month-and-spent-a-quarter-of-them-grading-ourselves-then-we-found-eight2026-09-14T21:57:29.271Z https://dugganusa.com/post/a-dead-german-wiki-got-20-edits-in-a-decade-then-it-got-18-000-posts-in-three-months-all-from-ai-a2026-09-05T02:31:56.149Z https://dugganusa.com/post/153-million-licenses-leaked-with-their-infrared-and-ultraviolet-scans-attached-the-anti-counterfeit2026-09-05T02:24:25.671Z https://dugganusa.com/post/litellm-just-took-its-third-cisa-kev-entry-this-one-is-an-mcp-auth-bypass-and-in-april-we-publish2026-09-04T02:21:41.701Z https://dugganusa.com/post/sonicwall-patched-the-sma1000-on-july-14-that-exact-build-is-what-september-s-zero-day-lists-as-vul2026-09-04T02:14:15.654Z https://dugganusa.com/post/nineteen-thousand-local-governments-lost-their-threat-intelligence-last-year-the-barrier-to-selling2026-09-03T06:53:08.253Z https://dugganusa.com/post/your-auth-middleware-and-your-router-disagree-about-what-was-requested-cve-2026-48710-is-rated-medi2026-09-03T06:11:42.424Z https://dugganusa.com/post/our-own-ledger-says-we-missed-eight-of-eleven-here-are-the-eight-including-two-red-hat-bugs-from2026-09-03T14:26:21.031Z https://dugganusa.com/post/four-groups-named-the-attack-this-year-nobody-has-named-the-defense-here-is-the-credit-map-and-tw2026-09-02T16:15:05.393Z https://dugganusa.com/post/correction-we-published-a-score-falling-by-nearly-half-as-a-signal-it-was-our-own-instrument-being2026-09-02T16:00:48.504Z https://dugganusa.com/post/yesterday-claude-refused-to-read-an-inert-script-over-one-sentence-today-researchers-used-it-to-por2026-09-04T14:26:16.815Z https://dugganusa.com/post/tokentheft-they-asked-the-agent-for-its-api-key-it-told-them-and-they-spent-600-000-of-someone-e2026-09-01T16:10:46.696Z https://dugganusa.com/post/we-tested-the-russian-anti-analysis-trick-on-three-models-two-analyzed-the-sample-and-flagged-the-d2026-09-01T16:05:07.794Z https://dugganusa.com/post/a-donation-plugin-on-100-000-sites-just-got-a-10-0-the-victims-are-food-banks-and-animal-shelters2026-08-31T16:24:01.104Z https://dugganusa.com/post/fire-ant-left-the-logging-on-it-just-made-sure-only-the-word-health-got-through-this-is-pattern2026-08-31T15:06:42.205Z https://dugganusa.com/post/the-atf-says-the-breached-system-was-standalone-that-is-the-good-news-and-the-bad-news-in-the-same2026-08-31T15:04:20.885Z https://dugganusa.com/post/infostealers-are-replaying-claude-sessions-to-burn-paid-usage-the-loot-is-not-your-data-it-is-your2026-08-31T15:01:41.227Z https://dugganusa.com/post/boston-scientific-and-mckesson-both-found-out-on-august-25-we-scored-boston-scientific-clean-in-may2026-08-31T14:49:11.898Z https://dugganusa.com/post/boston-scientific-and-mckesson-both-found-out-on-august-25-we-named-the-sector-in-march-the-chain2026-08-31T14:45:13.770Z https://dugganusa.com/post/if-the-indicator-was-in-the-feed-and-your-firewall-pulled-the-feed-the-attack-chain-broke-by-itself2026-09-14T21:56:39.664Z https://dugganusa.com/post/we-checked-every-cve-cisa-catalogued-in-the-last-month-all-thirty-we-were-early-on-seven-late-on2026-09-14T21:57:21.913Z https://dugganusa.com/post/he-didn-t-jailbreak-the-ai-he-told-it-the-engagement-was-a-test-and-breached-seven-companies-then2026-09-14T21:56:35.215Z https://dugganusa.com/post/they-published-24-npm-packages-that-nobody-was-ever-meant-to-install-the-package-was-never-the-weap2026-08-27T04:16:30.054Z https://dugganusa.com/post/everyone-will-write-about-the-clever-trick-that-took-283-cameras-the-default-password-took-12-3242026-08-27T04:16:28.744Z https://dugganusa.com/post/your-stolen-iphone-calls-you-back-in-a-voice-that-says-it-s-apple-support-lost-mode-handed-over-yo2026-08-27T01:06:26.235Z https://dugganusa.com/post/on-31-july-we-said-gitea-s-login-wall-wasn-t-a-wall-on-25-august-cisa-listed-it-as-actively-exploit2026-08-27T14:26:06.076Z https://dugganusa.com/post/you-were-told-to-read-the-notebook-before-you-run-it-in-marimo-opening-it-was-already-the-exploit2026-08-26T14:26:03.090Z https://dugganusa.com/post/they-let-you-finish-your-real-mfa-that-was-the-point-mirage2fa-took-4-532-sessions-from-9-426-atte2026-08-26T00:37:07.966Z https://dugganusa.com/post/the-signature-failed-to-verify-so-it-was-accepted-that-is-not-a-typo-it-is-cve-2026-15981-it-is2026-08-26T14:26:08.817Z https://dugganusa.com/post/their-command-and-control-layer-is-two-thousand-hacked-small-businesses-we-fed-the-hashes-and-refus2026-08-25T04:03:58.897Z https://dugganusa.com/post/a-9-4-that-lets-anyone-on-the-network-command-a-spacecraft-nasa-shipped-the-fix-nobody-assigned-it2026-08-25T03:50:33.981Z https://dugganusa.com/post/gitlab-patched-it-monday-our-harvester-had-the-exploit-endpoints-tuesday-watchtowr-saw-it-hitting2026-08-25T03:50:32.302Z https://dugganusa.com/post/how-armour-actually-works-and-why-ours-is-shaping-up-to-be-one-of-the-best-somebody-attacked-us-w2026-08-25T14:26:04.545Z https://dugganusa.com/post/tenable-patched-eleven-bugs-in-security-center-a-metasploit-contributor-published-exploits-for-exac2026-08-25T02:06:58.629Z https://dugganusa.com/post/the-dhs-breach-was-twice-ruled-a-false-positive-before-anyone-confirmed-it-that-detail-is-the-whole2026-08-24T20:49:03.369Z https://dugganusa.com/post/600-000-wordpress-sites-run-this-form-plugin-it-let-anyone-rewrite-the-upload-rules-before-uploadin2026-08-24T20:41:36.271Z https://dugganusa.com/post/three-times-this-month-account-recovery-was-the-way-in-keycloak-s-is-a-9-1-that-skips-the-email-li2026-09-14T21:57:16.884Z https://dugganusa.com/post/iran-linked-hackers-held-a-uk-power-plant-down-for-four-days-in-july-nobody-told-anyone-until-satur2026-08-24T20:26:51.982Z https://dugganusa.com/post/cisa-added-the-oracle-proxy-bug-to-kev-today-our-harvester-pulled-four-public-exploits-for-it-on-au2026-08-25T14:26:09.687Z https://dugganusa.com/post/microsoft-wrote-the-shared-responsibility-model-it-has-no-word-for-an-assistant-that-reads-untruste2026-08-23T13:45:35.112Z https://dugganusa.com/post/week-in-review-five-times-this-week-the-control-worked-fine-and-the-label-the-ceremony-or-the-boun2026-08-23T14:26:51.724Z https://dugganusa.com/post/the-sandbox-your-ai-agent-runs-untrusted-code-inside-just-got-a-host-rce-escape-a-million-downloads2026-08-23T13:16:47.097Z https://dugganusa.com/post/a-10-000-phishing-kit-does-not-break-your-passkey-it-enrolls-its-own-in-about-six-seconds-and2026-08-23T13:06:47.370Z https://dugganusa.com/post/a-norwegian-researcher-built-a-word-document-that-infects-other-word-documents-microsoft-has-patche2026-08-23T12:58:59.014Z https://dugganusa.com/post/zimbra-patched-this-on-july-20-cisa-gave-federal-agencies-until-tomorrow-the-bug-only-fires-if-thr2026-08-23T14:26:53.701Z https://dugganusa.com/post/that-ain-t-lake-minnetonka-a-one-man-soc-462-545-requests-and-a-bug-that-had-been-there-all-week2026-08-22T00:56:15.481Z https://dugganusa.com/post/somebody-crawled-our-entire-blog-in-one-evening-our-own-tracking-beacon-turned-it-into-209-066-requ2026-09-14T21:57:00.524Z https://dugganusa.com/post/we-published-three-posts-in-seventy-minutes-and-ddos-d-ourselves-here-is-the-whole-incident-includ2026-09-14T21:57:36.832Z https://dugganusa.com/post/what-is-a-stix-taxii-threat-feed-a-plain-english-definition-and-why-ours-just-stopped-refusing-yo2026-08-21T23:01:45.616Z https://dugganusa.com/post/yellowkey-vs-greatxml-what-the-difference-actually-is-between-the-two-bitlocker-bypasses-a-plain2026-08-21T22:52:03.528Z https://dugganusa.com/post/741-aziende-italiane-fanno-le-fatture-con-un-gestionale-che-ha-17-avvisi-di-sicurezza-e-un-bypass-am2026-08-21T20:02:06.026Z https://dugganusa.com/post/741-italian-firms-run-their-invoicing-on-software-with-17-advisories-and-an-unauthenticated-admin-by2026-08-21T19:52:50.854Z https://dugganusa.com/post/in-november-we-said-there-were-no-ai-adversaries-and-predicted-when-they-d-arrive-they-arrived-we2026-08-21T19:32:13.818Z https://dugganusa.com/post/somebody-asked-for-misp-in-a-feedback-box-here-is-the-feed-and-a-tag-on-every-single-record-telli2026-08-21T19:14:49.578Z https://dugganusa.com/post/the-filter-can-t-decrypt-the-model-can-that-asymmetry-is-the-whole-bug-and-it-has-been-open-at-x2026-08-21T14:14:03.546Z https://dugganusa.com/post/in-july-we-said-go-find-yours-before-the-sixth-the-sixth-langflow-kev-landed-august-4-now-mlflow-i2026-08-21T14:06:39.173Z https://dugganusa.com/post/lockbit-named-us-bank-and-started-a-14-day-clock-here-is-how-to-price-that-claim-and-what-our-own2026-08-21T13:59:13.619Z https://dugganusa.com/post/they-were-investigating-a-583-account-breach-they-found-a-1-360-563-account-breach-a-japanese-gove2026-09-14T21:57:11.537Z https://dugganusa.com/post/we-set-out-to-criticise-ai-watermarking-the-premise-was-wrong-so-we-built-the-thing-that-actually2026-09-14T21:57:41.152Z https://dugganusa.com/post/six-times-in-five-years-cisa-has-listed-a-bug-whose-only-job-was-defeating-the-fix-for-the-last-one2026-09-14T21:56:56.536Z https://dugganusa.com/post/81-million-login-attempts-came-over-ipv6-then-we-audited-our-own-signup-gate-and-found-it-cannot-se2026-09-14T21:56:18.188Z https://dugganusa.com/post/3-7-million-patients-a-six-day-window-in-an-aws-account-and-five-months-later-nobody-has-claimed-i2026-09-14T21:56:14.085Z https://dugganusa.com/post/medusa-pays-access-brokers-up-to-1-million-and-has-now-passed-500-victims-the-new-advisory-names-h2026-09-14T21:56:45.383Z https://dugganusa.com/post/we-published-the-exact-hunt-pattern-on-june-26-clop-just-listed-43-windchill-victims-including-shel2026-09-14T21:57:32.694Z https://dugganusa.com/post/microsoft-patched-a-defender-bug-in-july-the-bypass-dropped-august-12-the-mitigation-broke-scannin2026-09-14T21:56:48.994Z https://dugganusa.com/post/they-didn-t-need-a-zero-day-they-needed-a-ten-year-old-python-library-and-a-chatbot2026-08-19T23:43:02.940Z https://dugganusa.com/post/two-clocks-kev-weaponization-latency-and-what-actually-scans-you2026-08-19T02:05:47.268Z https://dugganusa.com/post/we-stopped-chasing-the-operator-and-started-detecting-the-shape2026-09-14T21:57:44.787Z https://dugganusa.com/post/stubmaker-sixteen-ruby-typosquats-and-a-deny-list-three-packages-long2026-08-18T21:39:53.856Z https://dugganusa.com/post/cisa-catalogued-the-cisco-door-and-left-the-ladder-a-cvss-10-0-root-bug-with-two-public-exploits-a2026-08-18T14:26:02.026Z https://dugganusa.com/post/someone-is-hiding-instructions-in-your-claude-md-here-is-a-free-tool-that-finds-them2026-09-14T21:57:03.905Z https://dugganusa.com/post/would-a-threat-feed-have-saved-mcdonald-s-probably-not-and-here-is-exactly-where-one-would2026-08-17T01:17:34.779Z https://dugganusa.com/post/the-next-big-thing-what-a-1975-punk-record-taught-us-about-security-vendor-math2026-08-16T16:28:43.739Z https://dugganusa.com/post/how-i-learned-to-stop-worrying-and-publish-the-feed-dr-strangelove-as-a-threat-intelligence-manua2026-08-16T15:00:15.265Z https://dugganusa.com/post/we-measured-our-own-free-edge-shield-the-blocklist-and-the-shield-catch-almost-entirely-different-a2026-09-14T21:57:25.781Z https://dugganusa.com/post/sap-shipped-a-fix-for-a-cvss-10-0-on-tuesday-somebody-was-exploiting-it-by-friday-and-there-is-st2026-08-16T00:15:15.511Z https://dugganusa.com/post/six-supplier-breaches-in-one-week-and-shinyhunters-is-in-two-of-them-the-metabase-bug-that-took-sh2026-08-16T00:15:14.225Z https://dugganusa.com/post/a-researcher-posted-a-geoserver-zero-day-on-x-at-10-46-utc-exploitation-started-within-hours-it-sc2026-08-16T00:15:12.749Z https://dugganusa.com/post/a-reader-asked-for-misp-we-shipped-it-in-a-day-and-the-first-version-would-have-republished-spamh2026-09-14T21:56:22.738Z https://dugganusa.com/post/your-tv-then-your-browser-now-your-router-evooo1bot-turns-edge-hardware-into-socks5-relays-the2026-08-15T16:39:40.265Z https://dugganusa.com/post/chaindrop-took-444-npm-packages-with-2-billion-monthly-downloads-signed-them-legitimately-and-read2026-08-15T16:39:39.806Z https://dugganusa.com/post/trivy-not-litellm-behind-the-2-500-org-compromise-ran-yesterday-we-published-that-chain-on-apri2026-08-15T16:39:36.321Z https://dugganusa.com/post/we-spent-nine-months-arguing-that-legal-recon-and-hostile-recon-are-the-same-packets-on-august2026-08-14T00:46:28.785Z https://dugganusa.com/post/broadcom-disclosed-a-9-8-in-vcenter-on-july-29-exploitation-started-five-days-later-and-95-of-the2026-08-14T00:46:27.411Z https://dugganusa.com/post/akira-rebooted-the-machine-into-safe-mode-blinded-the-edr-and-then-its-own-ransomware-wouldn-t-run2026-08-14T00:46:25.984Z https://dugganusa.com/post/four-weeks-ago-a-third-party-patched-legacyhive-because-microsoft-wouldn-t-yesterday-microsoft-ship2026-08-13T22:33:14.680Z https://dugganusa.com/post/ai-agents-breached-taiwan-s-nuclear-regulator-in-four-days-no-reactor-was-touched-and-the-credent2026-08-13T22:14:08.960Z https://dugganusa.com/post/researchers-decoded-315-320-encrypted-ai-reasoning-blocks-and-pulled-out-62-api-keys-33-passwords2026-08-13T03:47:04.947Z https://dugganusa.com/post/bring-your-own-vulnerable-driver-just-became-have-windows-fetch-it-for-you-a-forged-usb-descriptor2026-08-13T03:47:04.867Z https://dugganusa.com/post/the-fbi-unplugged-2-million-hijacked-tvs-in-july-this-week-737-fake-vpns-that-take-your-connection2026-08-13T03:36:35.431Z https://dugganusa.com/post/somebody-read-salesforce-and-servicenow-portals-worldwide-for-17-months-from-one-ip-address-there-i2026-08-13T03:11:42.954Z https://dugganusa.com/post/cisa-added-three-cves-yesterday-two-sit-on-surfaces-far-hotter-than-any-leaderboard-shows-because2026-08-13T14:26:07.833Z https://dugganusa.com/post/we-called-blockchain-c2-early-in-july-deadlock-had-been-running-it-as-a-business-since-august-2022026-08-13T02:44:06.252Z https://dugganusa.com/post/gunra-forticloud-sync-and-a-cve-typo2026-08-12T14:25:56.474Z https://dugganusa.com/post/time-agent-page-brand-facts-ai-crawlers2026-08-11T17:40:54.403Z https://dugganusa.com/post/trueconf-bdu-only-vulnerabilities-scanner-cannot-express2026-08-12T14:25:59.305Z https://dugganusa.com/post/solidity-pro-sleeps-72-hours-and-leaves-the-editor2026-08-11T17:40:49.695Z https://dugganusa.com/post/nc-ports-manual-gates-and-the-claim-that-never-came2026-08-11T17:19:49.788Z https://dugganusa.com/post/harness-not-the-model-three-agents-one-github-issue2026-08-11T17:17:31.663Z https://dugganusa.com/post/amozihev-colibri-search-index-is-the-hostage2026-08-11T17:17:19.573Z https://dugganusa.com/post/kev-21-day-window-is-gone-126-entries-zero2026-08-12T14:26:01.890Z https://dugganusa.com/post/wel1dropper-788-packages-three-single-string-tells2026-08-12T14:26:04.646Z https://dugganusa.com/post/this-may-be-the-last-post-i-am-not-staring-into-the-void-i-can-see-you-all-eighty-one-networks-o2026-08-09T18:42:24.851Z https://dugganusa.com/post/128-cves-got-public-exploit-code-yesterday-only-19-are-in-cisa-s-catalogue-here-are-the-four-worth2026-08-09T14:26:34.662Z https://dugganusa.com/post/we-measured-our-own-exploit-harvester-and-it-was-48-blind-the-fix-came-from-lord-vetinari-stop-ch2026-08-11T13:32:12.991Z https://dugganusa.com/post/the-kemp-loadmaster-exploit-and-the-first-attack-landed-on-the-same-day-cisa-catalogued-it-39-days2026-08-11T13:32:15.307Z https://dugganusa.com/post/atlassian-fixed-one-of-the-two-ways-to-make-rovo-leak-your-jira-the-other-one-was-still-open-when-i2026-08-11T13:32:16.974Z https://dugganusa.com/post/metabase-shipped-a-cvss-10-0-with-no-cve-your-scanner-cannot-see-it-kev-cannot-list-it-and-19-8102026-08-11T13:32:18.631Z https://dugganusa.com/post/we-had-unc6671-s-phishing-infrastructure-within-hours-at-confidence-70-our-auto-block-path-ignored2026-08-11T13:32:20.541Z https://dugganusa.com/post/a-root-shell-shipped-from-the-factory-in-21-firmware-images-across-two-years-endlessdoors-was-never2026-08-11T13:32:22.180Z https://dugganusa.com/post/we-tried-to-measure-whether-ai-is-accelerating-threats-our-own-data-says-we-cannot-answer-that-yet2026-08-11T13:32:23.804Z https://dugganusa.com/post/owareaper-survives-a-full-reimage-our-own-poc-watch-never-saw-it-because-a-zero-day-nobody-publis2026-08-11T13:32:25.467Z https://dugganusa.com/post/17-of-the-90-kev-entries-we-can-actually-measure-were-already-weaponized-before-cisa-listed-them-on2026-08-11T13:32:27.519Z https://dugganusa.com/post/exfilsquad-quietly-delisted-analog-devices-for-a-crew-with-no-malware-and-no-exploit-the-leak-site2026-08-11T13:32:29.197Z https://dugganusa.com/post/everest-claims-682-887-files-from-a-hospital-medication-vendor-including-firmware-certificates-an2026-08-11T13:33:44.685Z https://dugganusa.com/post/a-worm-poisoned-2-236-npm-package-versions-on-tuesday-the-part-that-survives-your-cleanup-lives-in2026-08-11T13:33:46.234Z https://dugganusa.com/post/we-named-the-wrong-russians-six-days-later-microsoft-named-the-right-ones-here-is-why-we-do-not-ha2026-08-11T13:33:48.332Z https://dugganusa.com/post/135-000-police-records-left-through-a-config-setting-appomni-published-the-fix-in-november-20242026-08-11T13:33:50.156Z https://dugganusa.com/post/three-fixes-shipped-in-six-days-none-of-them-made-the-thing-safe2026-08-11T13:33:51.999Z https://dugganusa.com/post/we-argued-this-morning-that-guardrail-prompts-cannot-stop-prompt-injection-somebody-already-measure2026-08-11T13:33:54.257Z https://dugganusa.com/post/two-actors-changed-method-this-year-and-both-invalidated-the-lesson-their-last-attack-taught-demons2026-08-11T13:33:56.083Z https://dugganusa.com/post/a-cvss-10-0-from-2021-just-became-iranian-tradecraft-it-was-never-really-patchable-the-fix-is-a-p2026-08-11T13:33:58.601Z https://dugganusa.com/post/how-to-osint-hunt-a-nation-state-with-a-corpus-you-already-have-the-vector-index-the-keyword-index2026-08-11T13:34:00.502Z https://dugganusa.com/post/three-coding-agents-one-comment-all-three-leaked-their-own-keys-one-vendor-called-it-9-4-critical2026-08-11T13:34:02.798Z https://dugganusa.com/post/a-cvss-10-0-in-adobe-campaign-classic-needs-nobody-to-open-anything-it-has-been-patched-four-days-a2026-08-11T13:34:05.360Z https://dugganusa.com/post/schneider-s-new-bug-needs-an-engineer-to-open-a-file-we-spent-this-week-documenting-controllers-tha2026-08-11T13:34:07.524Z https://dugganusa.com/post/amgen-told-the-sec-the-breach-was-material-nobody-has-claimed-it-those-two-facts-are-worth-more-th2026-08-11T13:34:09.303Z https://dugganusa.com/post/the-ai-agent-missed-457-times-because-it-could-not-tell-which-targets-would-work-your-plc-answers-t2026-08-11T13:34:11.543Z https://dugganusa.com/post/cisa-says-undocumented-cellular-modems-are-how-attackers-reached-water-utilities-here-is-what-that2026-08-11T13:34:13.420Z https://dugganusa.com/post/shinyhunters-stopped-stealing-vendor-tokens-and-started-making-phone-calls-if-you-prepared-for-last2026-08-11T13:34:15.295Z https://dugganusa.com/post/an-ai-agent-attacked-460-targets-by-itself-and-got-three-the-autonomy-is-real-the-hit-rate-is-not2026-08-11T13:34:17.107Z https://dugganusa.com/post/three-addresses-in-the-advisory-are-one-machine-it-claims-to-be-windows-7-and-the-protocol-says-it2026-08-11T13:34:18.973Z https://dugganusa.com/post/we-told-water-operators-to-check-port-44818-we-never-ran-that-check-against-the-attacker-list-it-s2026-08-11T13:34:20.956Z https://dugganusa.com/post/twenty-one-addresses-attacked-water-systems-in-seven-states-every-one-of-them-has-a-perfect-abuse-s2026-08-11T13:34:22.742Z https://dugganusa.com/post/claude-registered-a-package-name-nobody-had-claimed-and-fifteen-machines-installed-it-one-was-a-mal2026-08-11T13:34:24.482Z https://dugganusa.com/post/one-key-could-read-every-database-in-azure-cosmos-db-blocking-the-way-in-took-48-hours-removing-th2026-08-11T13:34:26.608Z https://dugganusa.com/post/two-frontier-labs-in-ten-days-told-their-model-it-was-in-a-sandbox-both-times-the-sandbox-was-the-l2026-08-11T13:34:28.282Z https://dugganusa.com/post/no-the-transunion-breach-was-not-the-salesloft-drift-breach-they-are-eleven-days-and-two-campaigns2026-08-11T13:34:30.173Z https://dugganusa.com/post/four-agencies-just-told-you-to-pre-build-your-isolation-plan-thirty-minnesota-water-systems-are-the2026-08-11T13:34:31.890Z https://dugganusa.com/post/gitea-shipped-a-9-8-that-needs-an-account-gitea-also-ships-with-anyone-being-able-to-make-one2026-08-11T13:34:33.646Z https://dugganusa.com/post/rails-held-the-exploit-details-until-august-28-a-working-poc-was-on-github-the-same-day2026-08-11T13:34:35.257Z https://dugganusa.com/post/broadcom-shipped-two-9-8s-in-vcenter-with-no-workaround-the-bug-that-should-worry-you-scores-2-72026-08-11T13:34:37.071Z https://dugganusa.com/post/you-rotated-the-credentials-and-re-imaged-the-laptop-the-russians-still-have-the-mailbox2026-08-11T13:34:38.970Z https://dugganusa.com/post/we-said-five-minnesota-water-systems-it-was-more-than-thirty-the-21-indicators-are-still-free2026-08-11T13:34:43.222Z https://dugganusa.com/post/teamcity-has-a-9-8-in-the-protocol-build-agents-use-to-phone-home-no-public-exploit-yet2026-08-11T13:34:45.094Z https://dugganusa.com/post/one-http-request-to-port-3001-hands-over-233-tools-patching-ruflo-does-not-undo-what-it-wrote-to-th2026-08-11T13:34:46.925Z https://dugganusa.com/post/there-is-a-static-password-in-the-box-that-manages-your-cisco-firewalls-you-have-until-saturday2026-08-11T13:34:48.875Z https://dugganusa.com/post/two-bugs-hit-kev-the-same-day-the-10-0-gets-them-in-the-5-3-keeps-them-there2026-08-11T13:34:50.719Z https://dugganusa.com/post/a-cvss-10-0-exploit-for-cal-com-landed-on-github-last-night-the-bug-is-not-cal-com-s-it-is-the-ne2026-08-11T13:34:52.489Z https://dugganusa.com/post/no-aes-is-not-broken-calm-down-claude-did-something-weirder-and-considerably-more-interesting-tha2026-08-11T13:34:54.280Z https://dugganusa.com/post/the-shared-responsibility-model-has-no-word-for-the-bmc-that-is-not-a-gap-in-the-model-it-is-proo2026-08-11T13:34:56.223Z https://dugganusa.com/post/we-counted-31-325-exposed-bmcs-here-is-what-one-is-actually-worth-your-host-s-ram-your-disk-encry2026-08-11T13:34:58.147Z https://dugganusa.com/post/eight-networks-hold-29-of-the-world-s-exposed-server-management-we-checked-them-against-our-own-bl2026-08-11T13:35:00.562Z https://dugganusa.com/post/on-july-1-we-said-engineering-effort-predicts-a-botnet-s-future-better-than-its-size-twenty-seven-d2026-08-11T14:17:21.985Z https://dugganusa.com/post/31-325-exposed-bmcs-hand-out-password-hashes-before-you-log-in-there-is-no-patch-the-biggest-owner2026-08-11T14:17:24.269Z https://dugganusa.com/post/if-you-re-reading-this-from-brazil-our-feed-is-49-50-not-99-from-nigeria-it-s-29-70-you-don-t2026-08-11T14:17:26.155Z https://dugganusa.com/post/an-iranian-crew-is-hunting-aviation-in-pakistan-and-banks-in-burkina-faso-here-are-32-indicators-a2026-08-11T14:17:28.018Z https://dugganusa.com/post/anything-that-can-reach-your-openwrt-router-s-dhcpv6-server-can-get-root-on-it-the-proof-of-concept2026-08-11T14:17:29.944Z https://dugganusa.com/post/three-medium-severity-artifactory-bugs-let-an-ai-model-out-of-a-sealed-lab-go-read-your-build-numbe2026-08-11T14:17:31.851Z https://dugganusa.com/post/five-minnesota-towns-had-their-water-controls-attacked-this-morning-here-are-21-ip-addresses-to-gre2026-08-11T14:17:35.730Z https://dugganusa.com/post/we-audited-our-own-instruments-for-one-day-ten-were-lying-four-of-the-lies-were-green-checkmarks2026-08-11T14:17:38.128Z https://dugganusa.com/post/he-moved-his-botnet-to-the-blockchain-so-nobody-could-take-it-down-then-he-wrote-his-own-confession2026-08-11T14:17:40.081Z https://dugganusa.com/post/we-said-this-morning-that-claiming-a-breach-isn-t-proof-shinyhunters-just-claimed-ernst-young-a2026-08-11T14:17:43.042Z https://dugganusa.com/post/teleshim-beacons-through-telegram-rides-an-asus-signature-in-and-won-t-decrypt-on-your-analysis-bo2026-08-11T14:17:46.079Z https://dugganusa.com/post/operation-bluedash-ships-no-malware-it-ships-screenconnect-and-your-edr-is-fine-with-that2026-08-11T14:17:47.986Z https://dugganusa.com/post/a-public-exploit-just-landed-for-vbulletin-the-first-fix-for-this-class-shipped-with-no-cve-at-all2026-08-11T14:17:49.781Z https://dugganusa.com/post/n8n-patched-this-sandbox-in-february-somebody-walked-around-the-patch-there-is-no-cve2026-08-11T14:17:51.861Z https://dugganusa.com/post/anyone-can-say-they-are-shinyhunters-vercel-s-attacker-did-and-shinyhunters-said-it-wasn-t-them2026-08-11T14:17:54.018Z https://dugganusa.com/post/the-mcp-registry-grew-170-in-twelve-weeks-we-also-found-out-89-of-our-own-change-feed-was-noise2026-08-11T14:17:55.902Z https://dugganusa.com/post/the-breach-was-explained-in-five-days-by-the-people-it-happened-to-congress-spent-a-year-voting-992026-08-11T14:17:58.053Z https://dugganusa.com/post/the-slow-blade-penetrates-the-shield-duneslide-overwrote-cursor-s-sandbox-guard-we-published-the-o2026-08-11T14:18:00.210Z https://dugganusa.com/post/purdue-is-like-communism-nobody-has-managed-it-without-cheating-yet2026-08-11T14:18:03.251Z https://dugganusa.com/post/four-code-execution-bugs-in-rockwell-arena-the-target-isn-t-your-plc-it-s-the-engineer-who-design2026-08-11T14:18:04.907Z https://dugganusa.com/post/the-ransomware-crew-has-a-support-desk-a-payouts-page-and-a-two-day-deadline-for-its-staff2026-08-11T14:18:06.646Z https://dugganusa.com/post/gitlab-fixed-this-in-june-and-filed-it-under-bug-fixes-a-poc-landed-six-weeks-later-there-is-sti2026-08-11T14:18:08.701Z https://dugganusa.com/post/github-made-dependabot-wait-three-days-your-ai-agent-doesn-t-use-dependabot2026-08-11T14:18:11.320Z https://dugganusa.com/post/there-is-no-patch-for-this-one-fastjson-1-x-is-being-exploited-and-the-library-is-dead2026-08-11T14:18:13.047Z https://dugganusa.com/post/we-told-you-to-hunt-hex-named-jsp-files-on-june-26-clop-started-dropping-them-then-we-forgot-we-d2026-08-11T14:18:14.948Z https://dugganusa.com/post/they-shipped-you-a-real-notepad-the-plugin-was-the-malware2026-08-11T14:18:17.003Z https://dugganusa.com/post/the-attacker-got-an-agent-and-a-targeting-model-in-the-same-week2026-08-11T14:18:18.782Z https://dugganusa.com/post/clop-went-after-the-product-designs-windchill-is-a-medical-device-problem-too2026-08-11T14:18:20.476Z https://dugganusa.com/post/sourtrade-builds-a-different-malware-for-every-victim-in-the-browser-before-it-ever-touches-disk2026-08-11T14:18:22.174Z https://dugganusa.com/post/the-hotel-wi-fi-took-your-microsoft-365-account-and-never-sent-you-an-email2026-08-11T14:18:24.240Z https://dugganusa.com/post/they-left-your-ladder-logic-running-and-deleted-the-safety-limits-cisa-updated-aa26-097a-and-nobody2026-08-11T14:18:26.218Z https://dugganusa.com/post/nineteen-agencies-from-thirteen-countries-wrote-a-router-advisory-with-zero-indicators-in-it-that-a2026-08-11T14:18:28.842Z https://dugganusa.com/post/friday-s-other-headlines-check-point-proved-our-playbook-and-north-korea-is-poisoning-packages-to2026-08-11T14:18:30.557Z https://dugganusa.com/post/a-new-exploit-turns-any-domain-user-into-a-domain-controller-it-dropped-on-a-friday-patch-your-ca2026-08-11T14:18:32.461Z https://dugganusa.com/post/github-s-abuse-filter-locked-out-its-own-customers-for-16-hours-then-actions-fell-over-again-this2026-08-11T14:18:34.402Z https://dugganusa.com/post/someone-is-faking-the-github-download-pages-of-ledger-turbotax-proton-and-claude-we-found-the-wh2026-08-11T14:18:36.368Z https://dugganusa.com/post/a-2017-linux-kernel-bug-just-got-a-public-root-exploit-one-command-tells-you-if-you-re-in-the-16-mi2026-08-11T14:18:38.157Z https://dugganusa.com/post/chaos-ransomware-s-new-rat-doesn-t-phone-home-it-opens-chrome-and-lets-chrome-do-it2026-08-11T14:18:40.121Z https://dugganusa.com/post/sharepoint-on-prem-has-six-kev-entries-this-year-four-since-july-1-the-fix-isn-t-patch2026-08-11T14:18:42.012Z https://dugganusa.com/post/we-need-seven-paying-customers-to-keep-the-feeds-free-we-have-two2026-08-11T14:18:43.745Z https://dugganusa.com/post/a-new-check-point-bug-hands-out-admin-on-the-console-that-programs-every-firewall-it-s-the-second-a2026-08-11T14:18:45.833Z https://dugganusa.com/post/a-china-nexus-spy-crew-impersonated-claude-crowdstrike-and-sentinelone-its-victims-were-a-hospita2026-08-11T14:18:47.637Z https://dugganusa.com/post/oracle-shipped-1-200-patches-tuesday-shinyhunters-had-been-inside-peoplesoft-since-may2026-08-11T14:18:49.865Z https://dugganusa.com/post/langflow-just-hit-kev-a-fifth-time-go-find-yours-before-the-sixth2026-08-11T14:18:51.728Z https://dugganusa.com/post/openai-pulled-the-plug-on-its-own-model-it-had-watched-the-security-scanner-then-split-an-auth-tok2026-08-11T14:18:53.949Z https://dugganusa.com/post/ten-of-eleven-ai-coding-agents-fell-to-a-shell-trick-older-than-the-people-who-wrote-them-the-one-t2026-08-11T14:18:55.781Z https://dugganusa.com/post/takedown-proof-malware-still-needs-a-landlord-we-mapped-36-of-them-this-morning-and-six-are-servi2026-08-11T14:18:57.467Z https://dugganusa.com/post/the-sonicwall-vpn-proxied-the-attacker-to-its-own-internal-database-the-password-was-admin-admin-u2026-08-11T14:19:00.258Z https://dugganusa.com/post/sharepoint-has-another-9-8-under-active-attack-and-the-attackers-are-stealing-your-machine-keys-w2026-08-11T14:19:02.057Z https://dugganusa.com/post/two-different-ransomware-gangs-now-claim-they-hacked-coca-cola-s-fairlife-one-says-22-terabytes-on2026-08-11T14:19:04.471Z https://dugganusa.com/post/7-600-fake-github-repos-800-of-them-pretending-to-be-mcp-servers-and-the-new-trick-is-getting-you2026-08-11T14:19:07.613Z https://dugganusa.com/post/an-ai-agent-acts-on-what-it-sees-researchers-made-five-android-agents-see-text-no-human-could-and2026-08-11T14:19:10.155Z https://dugganusa.com/post/7-zip-has-a-code-execution-bug-in-how-it-opens-archives-and-no-auto-update-to-push-the-fix-millio2026-08-11T14:19:11.849Z https://dugganusa.com/post/qilin-is-now-riding-a-palo-alto-vpn-auth-bypass-into-corporate-networks-the-patch-shipped-in-may-t2026-08-11T14:19:13.701Z https://dugganusa.com/post/this-macos-malware-kills-every-app-on-your-screen-every-210-milliseconds-until-you-type-your-passwor2026-08-11T14:19:15.920Z https://dugganusa.com/post/two-different-crews-breached-abbott-the-same-week-a-cancer-diagnostics-unit-and-a-lab-portal-in-m2026-08-11T14:19:17.936Z https://dugganusa.com/post/a-week-after-legacyhive-dropped-microsoft-still-hasn-t-patched-it-a-third-party-did-for-free-he2026-08-11T14:19:19.672Z https://dugganusa.com/post/four-ai-coding-agents-got-their-sandboxes-broken-this-week-and-nobody-attacked-the-sandbox-they-j2026-08-11T14:19:21.719Z https://dugganusa.com/post/the-first-ai-native-ransomware-is-here-it-doesn-t-lock-your-files-it-encrypts-the-models-themselv2026-08-11T14:19:23.730Z https://dugganusa.com/post/est%C3%A9e-lauder-just-confirmed-it-was-breached-in-the-oracle-attack-we-covered-last-fall-the-intruders2026-08-11T14:19:26.822Z https://dugganusa.com/post/watchguard-patched-this-firewall-bug-nine-months-ago-someone-just-tuned-the-exploit-to-your-exact-f2026-08-11T14:19:29.034Z https://dugganusa.com/post/servicenow-holds-the-map-of-your-entire-network-a-pre-auth-bug-just-handed-it-to-strangers-and-the2026-08-11T14:19:30.909Z https://dugganusa.com/post/this-iranian-malware-has-no-c2-server-to-block-the-command-channel-is-a-meeting-invite-in-your-own2026-08-11T14:19:33.074Z https://dugganusa.com/post/github-had-a-valid-replacement-certificate-for-31-days-before-the-one-it-was-serving-expired-the-re2026-08-11T14:19:34.892Z https://dugganusa.com/post/an-ai-agent-breached-hugging-face-when-the-defenders-asked-an-ai-for-help-reading-the-logs-they-we2026-08-11T14:19:36.615Z https://dugganusa.com/post/a-seven-year-old-rubygem-is-trusted-by-design-sleepergem-turned-that-into-the-attack-and-our-own-s2026-08-11T14:19:38.801Z https://dugganusa.com/post/github-let-a-free-certificate-expire-and-killed-every-self-hosted-runner-on-earth2026-08-11T14:19:40.837Z https://dugganusa.com/post/we-claimed-a-two-month-lead-our-own-timestamp-says-we-were-one-day-late2026-08-11T14:19:42.764Z https://dugganusa.com/post/the-attacker-did-11-of-the-work-gemini-did-the-rest-the-victim-was-a-dental-clinic2026-08-11T14:19:44.505Z https://dugganusa.com/post/why-enterprise-security-fails-and-how-to-fix-that2026-08-11T14:19:47.164Z https://dugganusa.com/post/grep-found-nothing-the-mcp-found-seven2026-08-11T14:19:50.083Z https://dugganusa.com/post/a-hacker-left-his-server-open-for-22-days-inside-1-4-million-wordpress-targets-27-weaponized-cves2026-08-11T14:19:52.004Z https://dugganusa.com/post/apt28-deleted-the-payload-a-worm-deleted-the-operator-oidc-deleted-the-password-that-s-one-patter2026-08-11T14:19:53.614Z https://dugganusa.com/post/everest-hit-coca-cola-twice-the-middle-east-passports-in-the-fairlife-leak-are-the-fingerprint2026-08-11T14:19:55.418Z https://dugganusa.com/post/salt-typhoon-s-official-advisory-lists-88-indicators-you-can-block-exactly-none-of-them2026-08-11T14:19:57.565Z https://dugganusa.com/post/we-said-get-splunk-off-the-internet-shodan-says-11-422-of-you-didn-t-and-6-900-are-in-the-united2026-08-11T14:19:59.362Z https://dugganusa.com/post/a-cyberattack-stopped-japan-s-biggest-frozen-food-company-cold-and-kfc-japan-ran-short-of-ingredien2026-08-11T14:20:01.086Z https://dugganusa.com/post/nadmesh-is-a-botnet-built-to-hunt-your-ai-tools-20-plus-exploits-3-811-stolen-aws-keys-and-a-scan2026-08-11T14:20:02.922Z https://dugganusa.com/post/wordpress-shipped-an-emergency-patch-on-a-friday-for-a-pre-auth-rce-in-its-own-core-it-s-called-wp22026-08-11T14:20:04.909Z https://dugganusa.com/post/three-perfect-10-bugs-in-unifi-os-are-being-exploited-to-mint-rogue-admins-it-s-the-gear-half-the-s2026-08-11T14:20:06.582Z https://dugganusa.com/post/splunk-enterprise-will-let-an-unauthenticated-stranger-write-files-to-your-siem-it-s-being-exploite2026-08-11T14:20:09.819Z https://dugganusa.com/post/for-the-folks-just-tuning-in-yes-claude-helps-write-this-and-i-m-loud-about-it-here-s-the-honest2026-08-11T14:20:12.030Z https://dugganusa.com/post/fortisandbox-is-back-on-cisa-s-exploited-list-and-this-time-feds-get-four-days-we-started-the-fort2026-10-06T17:22:56.201Z https://dugganusa.com/post/microsoft-shipped-570-fixes-tuesday-by-wednesday-its-serial-tormentor-dropped-a-windows-zero-day-wi2026-08-11T14:20:15.536Z https://dugganusa.com/post/balbooa-forms-has-an-unauthenticated-file-upload-bug-cisa-says-is-being-exploited-and-the-small-or2026-08-11T14:20:17.250Z https://dugganusa.com/post/in-march-we-named-medical-device-makers-the-ones-getting-breached-then-medtronic-stryker-intuit2026-08-11T14:20:19.040Z https://dugganusa.com/post/your-claude-preferences-sync-to-every-device-pentera-turned-that-into-a-reverse-shell-and-anthrop2026-08-11T14:20:21.321Z https://dugganusa.com/post/china-called-claude-code-a-backdoor-the-uncomfortable-part-is-that-the-hidden-code-was-real-and-w2026-08-11T14:20:23.117Z https://dugganusa.com/post/famoussparrow-hit-azerbaijan-s-oil-and-gas-sector-through-exchange-the-c2-was-in-our-feed-since-may2026-08-11T14:20:24.739Z https://dugganusa.com/post/we-checked-the-mcp-registry-every-other-security-vendor-s-mcp-is-a-doorway-to-a-product-you-already2026-08-11T14:20:26.658Z https://dugganusa.com/post/a-malicious-extension-can-trigger-claude-s-browser-actions-with-a-fake-click-because-it-never-chec2026-08-11T14:20:28.503Z https://dugganusa.com/post/we-aimed-our-new-hunter-at-the-fortune-500-and-found-fake-citrix-cisco-and-fortinet-installers-i2026-08-11T14:20:30.183Z https://dugganusa.com/post/arctic-wolf-named-292-fake-github-repos-yesterday-we-built-the-hunter-overnight-and-it-flagged-nine2026-08-11T14:20:33.022Z https://dugganusa.com/post/the-doj-took-18-months-to-indict-a-bulletproof-host-a-defender-blocks-one-in-a-day-here-s-the-meth2026-08-11T14:20:35.077Z https://dugganusa.com/post/starland-rat-trojanizes-zoom-and-webex-then-hides-its-backup-c2-on-a-polygon-smart-contract-we-did2026-08-11T14:20:37.105Z https://dugganusa.com/post/arctic-wolf-found-292-fake-github-repos-pushing-an-infostealer-one-impersonating-arctic-wolf-itsel2026-08-11T14:20:39.274Z https://dugganusa.com/post/attackers-keep-hiding-malware-on-ipfs-because-they-think-it-s-un-seizable-we-ve-quietly-resolved-342026-08-11T14:20:41.057Z https://dugganusa.com/post/the-asyncapi-malware-hid-its-payload-on-ipfs-to-be-takedown-proof-ipfs-isn-t-anonymous-here-s-the2026-08-11T14:20:42.846Z https://dugganusa.com/post/570-fixes-two-live-zero-days-and-both-are-privilege-bugs-in-plumbing-you-forgot-you-run-adfs-is-t2026-08-11T14:20:44.696Z https://dugganusa.com/post/sonicwall-s-sma1000-just-got-two-zero-days-and-a-federal-ultimatum-we-ve-called-the-edge-appliance2026-08-11T14:20:46.627Z https://dugganusa.com/post/cisa-says-three-sharepoint-flaws-are-being-chained-right-now-we-wrote-the-hunt-for-one-of-them-in-m2026-08-11T14:20:48.588Z https://dugganusa.com/post/a-ghost-font-claimed-only-human-eyes-could-read-it-redeye-beat-it-in-20-minutes-with-1981-math-t2026-08-11T14:20:50.377Z https://dugganusa.com/post/ai-written-malware-narrates-itself-that-s-how-you-catch-it-we-said-this-morning-hours-later-kas2026-08-11T14:20:52.290Z https://dugganusa.com/post/yesterday-we-warned-unifi-s-clean-look-hides-its-attack-surface-with-no-receipt-today-ubiquiti-di2026-08-11T14:20:54.080Z https://dugganusa.com/post/six-ai-coding-agents-will-write-an-attacker-s-ssh-key-to-your-server-the-approval-box-showed-the-w2026-08-11T14:20:56.233Z https://dugganusa.com/post/jadepuffer-is-the-first-ransomware-an-ai-ran-by-itself-it-broke-in-through-the-ai-agent-builder-we2026-08-11T14:20:58.440Z https://dugganusa.com/post/lidl-s-breach-wasn-t-lidl-s-we-named-this-genre-two-weeks-ago-with-nissan-and-now-it-has-a-grocery2026-08-11T14:21:00.158Z https://dugganusa.com/post/two-new-phishing-kits-walk-around-your-microsoft-365-mfa-from-opposite-directions-one-never-asks-fo2026-08-11T14:21:02.878Z https://dugganusa.com/post/react2shell-was-a-christmas-story-seven-months-later-our-harvester-has-logged-two-dozen-exploit-rep2026-08-11T14:21:07.013Z https://dugganusa.com/post/a-fresh-joomla-rce-grew-a-four-account-exploit-pipeline-in-nine-days-it-s-already-defaced-fifty-sit2026-08-11T14:21:09.390Z https://dugganusa.com/post/tenda-s-router-firmware-checks-your-password-if-it-s-wrong-it-checks-a-second-hidden-one-that-s2026-08-11T14:21:11.323Z https://dugganusa.com/post/this-morning-we-missed-chocopoc-this-afternoon-we-built-the-detector-this-evening-it-found-a-live2026-08-11T14:21:13.150Z https://dugganusa.com/post/chocopoc-is-hiding-in-the-exploit-pocs-you-re-about-to-run-we-checked-our-own-feed-we-didn-t-have2026-08-11T14:21:15.041Z https://dugganusa.com/post/the-monday-board-brief-accenture-ford-and-brightspeed-are-in-this-week-s-headlines-we-filed-all2026-08-11T14:21:17.858Z https://dugganusa.com/post/people-trust-unifi-because-it-looks-clean-100-000-of-them-are-one-passwordless-command-from-takeove2026-08-11T14:21:21.336Z https://dugganusa.com/post/we-flagged-the-coldfusion-exploitation-five-days-before-cisa-s-catalog-did-it-just-became-adobe-s-n2026-08-11T14:21:23.462Z https://dugganusa.com/post/in-may-we-wrote-two-minutes-from-anonymous-stranger-to-every-router-talos-just-named-the-actor-wh2026-08-11T14:21:25.069Z https://dugganusa.com/post/sharefile-has-86-000-customers-mostly-small-law-accounting-and-medical-firms-they-re-being-hit2026-08-11T14:21:26.939Z https://dugganusa.com/post/progress-just-told-sharefile-customers-to-physically-power-down-their-servers-no-patch-no-cve-no2026-08-11T14:21:28.805Z https://dugganusa.com/post/someone-backdoored-a-crypto-sdk-to-steal-wallet-keys-on-tuesday-our-deny-list-was-already-blocking2026-08-11T14:21:30.596Z https://dugganusa.com/post/abnormal-spends-over-10-million-a-year-on-anthropic-it-learned-anthropic-was-suing-it-over-a-log2026-08-11T14:21:32.172Z https://dugganusa.com/post/oracle-e-business-suite-got-a-9-8-unauthenticated-takeover-attackers-were-inside-before-a-poc-exist2026-08-11T14:21:33.894Z https://dugganusa.com/post/langflow-just-hit-the-kev-list-for-the-fourth-time-we-called-this-exact-attack-surface-in-march-22026-08-11T14:21:35.463Z https://dugganusa.com/post/yesterday-we-shipped-a-malicious-package-blocker-today-a-real-npm-compromise-dropped-here-s-the-re2026-08-11T14:21:37.327Z https://dugganusa.com/post/we-shipped-a-free-mcp-tool-that-makes-your-ai-agent-refuse-malicious-packages-one-call-no-key-her2026-08-11T14:21:39.111Z https://dugganusa.com/post/the-attacker-stopped-breaking-in-now-it-convinces-your-ai-agent-to-hand-over-the-keys-a-field-map2026-08-11T14:21:41.171Z https://dugganusa.com/post/the-scariest-bug-in-the-internet-s-biggest-zero-day-dump-was-already-old-news-to-us-we-autopsied-li2026-08-11T14:21:43.141Z https://dugganusa.com/post/australia-s-cyber-authority-just-warned-the-world-about-a-cms-webshell-campaign-we-named-its-headli2026-08-11T14:21:44.858Z https://dugganusa.com/post/your-recovery-phrase-was-never-random-ill-bloom-drained-5m-by-guessing-seeds-that-should-have-be2026-08-11T14:21:47.047Z https://dugganusa.com/post/saturday-sweep-an-iranian-wiper-wearing-a-onedrive-costume-an-ai-phishing-kit-for-400-a-month-an2026-08-11T14:21:48.759Z https://dugganusa.com/post/ghostcommit-hides-the-attack-in-a-png-your-ai-reviewer-never-opens-it-robbed-cursor-and-bugbot-of-r2026-08-11T14:21:50.685Z https://dugganusa.com/post/friday-threat-brief-shinyhunters-are-still-inside-peoplesoft-warlock-ransomware-is-riding-sharepoi2026-08-11T14:21:52.545Z https://dugganusa.com/post/hallusquatting-when-your-ai-assistant-hallucinates-a-package-name-at-100-and-an-attacker-already-r2026-08-11T14:21:54.375Z https://dugganusa.com/post/the-approval-box-lied-ghostapproval-turns-a-malicious-repo-s-project_settings-json-into-your-~-ssh2026-08-11T14:21:56.493Z https://dugganusa.com/post/the-fourth-uap-drop-landed-this-morning-we-read-all-40-indexed-them-and-put-them-on-the-globe-bef2026-08-11T14:21:58.706Z https://dugganusa.com/post/google-s-tag-reported-the-zimbra-bug-that-got-patched-today-that-s-the-tell-assume-a-state-actor-a2026-08-11T14:22:01.028Z https://dugganusa.com/post/one-github-account-shipped-a-dozen-mass-exploitation-frameworks-in-a-week-today-s-wears-a-fake-cve2026-08-11T14:22:02.774Z https://dugganusa.com/post/two-kev-bugs-we-owe-you-late-and-the-ransomware-access-cluster-they-fall-into-we-ve-been-mapping-i2026-08-11T14:22:04.585Z https://dugganusa.com/post/three-june-kev-bugs-we-didn-t-break-first-here-s-the-honest-brief-and-the-one-doorway-they-share2026-08-11T14:22:06.342Z https://dugganusa.com/post/a-github-account-slept-for-nineteen-months-then-woke-up-today-to-drop-a-one-click-mass-exploit-kit2026-08-11T14:22:08.197Z https://dugganusa.com/post/thursday-s-other-headlines-microsoft-finally-patched-the-defender-bug-we-called-three-weeks-ago-me2026-08-11T14:22:09.958Z https://dugganusa.com/post/ghostlock-gives-root-in-five-seconds-and-walks-out-of-your-container-it-s-the-third-15-year-old-lin2026-08-11T14:22:11.893Z https://dugganusa.com/post/17-fake-payment-sdks-landed-on-npm-and-pypi-today-hunting-your-aws-and-github-keys-four-were-alrea2026-08-11T14:22:13.689Z https://dugganusa.com/post/congress-is-just-now-demanding-answers-about-a-leak-we-filed-in-may-four-times-this-week-the-news-c2026-08-11T14:22:15.364Z https://dugganusa.com/post/what-rough-beast-this-month-the-attacker-the-victim-and-the-malware-all-stopped-being-human-and2026-08-11T14:22:17.204Z https://dugganusa.com/post/china-s-national-vuln-database-called-the-claude-code-tracker-a-backdoor-one-day-after-we-called2026-08-11T14:22:18.927Z https://dugganusa.com/post/malicious-websites-are-now-tricking-ai-agents-into-paying-crypto-we-built-the-scanner-for-this-exac2026-08-11T14:22:20.556Z https://dugganusa.com/post/one-http-header-turns-you-into-gitea_admin-it-s-the-second-gitea-auth-bypass-we-ve-covered-in-five2026-08-11T14:22:22.486Z https://dugganusa.com/post/the-fbi-just-unplugged-a-2-million-device-proxy-botnet-we-published-1-360-iocs-on-this-exact-racket2026-08-11T14:22:24.742Z https://dugganusa.com/post/accenture-sells-fortune-500s-their-security-playbook-ten-plus-of-its-own-developers-are-infostealer2026-08-11T14:22:26.628Z https://dugganusa.com/post/jivasecurity-erp-rce-forks-next-target2026-08-11T14:22:28.525Z https://dugganusa.com/post/anthropic-claude-code-steganography-tracker2026-08-11T14:22:30.354Z https://dugganusa.com/post/six-chains-zero-on-kev2026-08-11T14:22:32.241Z https://dugganusa.com/post/januscape-kvm-16-years2026-08-11T14:22:33.987Z https://dugganusa.com/post/beyondtrust-april-cloud-july-selfhosted2026-08-11T14:22:36.216Z https://dugganusa.com/post/roundcube-physics-departments2026-08-11T14:22:39.437Z https://dugganusa.com/post/cavern-manticore-iran-c22026-08-11T14:22:41.021Z https://dugganusa.com/post/coldfusion-window-was-two-hours2026-08-11T14:22:43.032Z https://dugganusa.com/post/ninety-minutes-ago-blocking-ipfs-hosted-malware-was-theoretical-here-s-the-host-map-live-in-our-f2026-08-11T14:22:45.191Z https://dugganusa.com/post/there-s-no-domain-to-seize-malware-is-quietly-moving-to-ipfs-and-our-board-just-lit-up-on-a-fresh2026-08-11T14:22:47.114Z https://dugganusa.com/post/warlock-slouches-back-to-work2026-08-11T14:22:48.929Z https://dugganusa.com/post/linkedin-resume-class-war2026-08-11T14:22:50.891Z https://dugganusa.com/post/holiday-instruments-went-dark2026-08-11T14:22:52.716Z https://dugganusa.com/post/krybit-ford-mexico-verify2026-08-11T14:22:54.672Z https://dugganusa.com/post/thiel-rig-2028-receipts2026-08-11T14:22:56.894Z https://dugganusa.com/post/who-is-actually-under-attack-right-now-meta-apple-and-itsme-are-live-in-the-phishing-feed-our-in2026-08-11T14:22:58.873Z https://dugganusa.com/post/medtronic-sent-a-perjury-backed-takedown-to-bury-our-breach-warning-today-they-are-mailing-9-millio2026-08-11T14:23:01.101Z https://dugganusa.com/post/two-of-the-five-big-ai-models-think-we-sell-embroidery-and-motorcycle-vests-here-is-the-canonical-r2026-08-11T14:23:05.159Z https://dugganusa.com/post/seo-isn-t-dying-it-got-promoted-search-quietly-became-the-api-that-decides-whether-a-model-says-th2026-08-11T14:23:06.882Z https://dugganusa.com/post/confidential-computing-s-whole-pitch-is-trust-the-proof-not-the-cloud-two-years-of-formal-verifi2026-08-11T14:23:08.717Z https://dugganusa.com/post/two-ransomware-crews-hit-sysco-in-two-months-qilin-in-may-shinyhunters-in-june-when-two-gangs-wal2026-08-11T14:23:10.775Z https://dugganusa.com/post/avalon-ships-its-own-ransomware-and-outsources-its-brain-to-groq-the-attacker-types-english-a-publ2026-08-11T14:23:12.417Z https://dugganusa.com/post/bad-epoll-is-the-second-linux-root-bug-in-a-week-and-it-fires-from-inside-chrome-s-sandbox-still2026-08-11T14:23:14.171Z https://dugganusa.com/post/dirtyclone-rewrites-your-su-binary-in-memory-and-never-touches-the-disk-there-s-a-working-exploit2026-08-11T14:23:16.061Z https://dugganusa.com/post/the-first-ai-run-ransomware-didn-t-crack-anything-it-walked-through-default-passwords-and-that-s2026-08-11T14:23:17.866Z https://dugganusa.com/post/in-april-we-called-the-security-stack-the-attack-surface-the-honest-question-is-whether-that-was-pr2026-08-11T14:23:19.801Z https://dugganusa.com/post/the-fortigate-credentials-feeding-this-ransomware-wave-were-an-audit-result-we-published-in-june-he2026-08-11T14:23:21.768Z https://dugganusa.com/post/dragos-named-three-new-ot-threat-groups-one-deployed-wipers-during-the-iran-conflict-here-s-where2026-08-11T14:23:23.650Z https://dugganusa.com/post/five-countries-got-a-veto-on-palantir-americans-got-immigrationos2026-08-11T14:23:25.822Z https://dugganusa.com/post/citrixbleed-came-back-a-third-time-476-spaces-and-a-half-written-xml-tag-is-all-it-takes-to-read-ne2026-08-11T14:23:27.967Z https://dugganusa.com/post/alex-karp-says-enterprises-pay-for-tokens-that-create-no-value-our-tokens-fixed-four-production-fai2026-08-11T14:23:29.709Z https://dugganusa.com/post/a-perfect-10-zero-day-just-owned-the-brain-of-cisco-sd-wan-chain-it-with-the-bug-we-mapped-in-may-a2026-08-11T14:23:31.495Z https://dugganusa.com/post/the-gauges-were-all-green-and-the-line-was-down-five-systems-lied-to-me-in-a-day-and-that-s-the-wh2026-08-11T14:23:33.282Z https://dugganusa.com/post/we-spent-twenty-years-teaching-people-not-to-click-attackers-just-stopped-needing-the-click2026-08-11T14:23:35.172Z https://dugganusa.com/post/adobe-just-dropped-five-perfect-10s-in-coldfusion-the-exploit-is-the-oldest-religion-on-the-web-up2026-08-11T14:23:36.983Z https://dugganusa.com/post/china-is-inside-dhs-s-own-threat-sharing-network-the-bug-they-used-has-been-on-cisa-s-known-exploit2026-08-11T14:23:38.614Z https://dugganusa.com/post/ai-is-now-a-door-a-lure-and-a-safe-the-twist-is-that-attackers-are-opening-all-three-with-tricks2026-08-11T14:23:40.356Z https://dugganusa.com/post/blackfield-didn-t-just-ransom-nidec-it-published-a-price-menu-2m-to-make-it-go-away-5k-a-day-to2026-08-11T14:23:42.713Z https://dugganusa.com/post/ai-hallucinates-a-domain-for-your-brand-an-attacker-registers-it-before-you-do-we-already-measure2026-08-11T14:23:44.562Z https://dugganusa.com/post/ten-of-eleven-ai-coding-agents-can-be-fooled-by-bash-tricks-older-than-their-users-the-one-that-hel2026-08-11T14:23:47.037Z https://dugganusa.com/post/four-japanese-giants-breached-in-two-weeks-an-insurer-a-telecom-a-brewer-a-motor-maker-almost-n2026-08-11T14:23:49.315Z https://dugganusa.com/post/rustduck-is-a-small-botnet-engineering-like-it-plans-to-get-big-the-tell-isn-t-its-size-it-s-how2026-08-11T14:23:51.170Z https://dugganusa.com/post/blacknevas-doesn-t-leak-your-data-itself-it-subcontracts-the-threat-to-six-other-gangs-that-s-the2026-08-11T14:23:53.347Z https://dugganusa.com/post/the-gentlemen-a-ransomware-crew-polite-enough-to-brand-its-passwords-sloppy-enough-to-get-breached2026-08-11T14:23:55.081Z https://dugganusa.com/post/no-funding-two-people-here-s-where-we-kick-ass-and-the-receipt-for-every-claim2026-08-11T14:23:57.263Z https://dugganusa.com/post/a-monero-miner-rode-a-langflow-bug-into-ai-servers-in-march-the-c2-it-called-home-was-in-our-feed-s2026-08-11T14:23:59.229Z https://dugganusa.com/post/there-is-a-public-exploit-for-a-pre-auth-root-bug-in-kemp-loadmaster-if-your-load-balancer-s-api-is2026-08-11T14:24:01.442Z https://dugganusa.com/post/a-new-infostealer-is-hunting-your-claude-gemini-and-codex-keys-it-gets-in-through-your-help-desk2026-08-11T14:24:03.351Z https://dugganusa.com/post/arista-won-t-patch-the-bug-that-makes-your-perimeter-acls-decorative-your-log-pipeline-will-bill-yo2026-08-11T14:24:05.439Z https://dugganusa.com/post/we-read-our-own-ai-report-card-out-loud-then-we-ran-the-same-test-on-cribl2026-08-11T14:24:07.369Z https://dugganusa.com/post/the-ai-visibility-glossary-18-terms-for-the-generative-engine-era2026-08-11T14:24:09.182Z https://dugganusa.com/post/how-to-read-your-bing-ai-performance-report-and-what-the-zeros-mean2026-08-11T14:24:11.157Z https://dugganusa.com/post/what-is-a-grounding-query-bing-s-new-unit-of-ai-visibility-explained2026-08-11T14:24:12.799Z https://dugganusa.com/post/what-is-ai-presence-management-aipm-a-plain-english-definition2026-08-11T14:24:15.018Z https://dugganusa.com/post/correcting-our-nissan-call-it-was-their-own-peoplesoft-and-we-had-the-c2-28-days-early2026-08-11T14:24:16.625Z https://dugganusa.com/post/iran-s-water-plant-crew-just-got-a-permanent-file-in-our-index-defenders-have-a-right-to-the-same-p2026-08-11T14:24:18.290Z https://dugganusa.com/post/we-named-the-klue-oauth-breach-on-june-18-the-victim-list-just-filled-in-and-it-s-security-vendor2026-08-11T14:24:20.205Z https://dugganusa.com/post/nissan-s-fourth-breach-in-four-years-wasn-t-nissan-s-that-s-the-whole-problem2026-08-11T14:24:22.003Z https://dugganusa.com/post/dragonforce-stopped-bothering-to-encrypt-it-just-walks-out-with-the-energy-grid-and-the-pacemaker-f2026-08-11T14:24:23.631Z https://dugganusa.com/post/inhuman-resources-a-considered-response-to-every-recruiter-who-filtered-me-out2026-08-11T14:24:25.334Z https://dugganusa.com/post/the-staging-layer-a-kimsuky-class-phishing-farm-on-free-korean-dns-and-a-bumper-crop-of-github-rat2026-08-11T14:24:27.023Z https://dugganusa.com/post/open-the-folder-lose-your-aws-keys-amazon-q-auto-ran-whatever-a-repo-told-it-to-cve-2026-129572026-08-11T14:24:28.805Z https://dugganusa.com/post/we-had-the-scanner-signature-on-june-13-cisco-s-phone-system-bug-hits-its-federal-deadline-today-c2026-08-11T14:24:30.637Z https://dugganusa.com/post/polymarket-got-robbed-through-somebody-else-s-security-twice-in-a-month-this-time-the-lie-was-in2026-08-11T14:24:32.539Z https://dugganusa.com/post/the-gentlemen-built-edr-killer-as-a-service-we-have-been-blocking-their-infrastructure-since-april2026-08-11T14:24:34.552Z https://dugganusa.com/post/be-best-we-couldn-t-have-blocked-the-klue-breach-and-we-re-not-going-to-dunk-on-the-security-compa2026-08-11T14:24:36.221Z https://dugganusa.com/post/icarus-stole-salesforce-data-from-a-hundred-security-firms-then-somebody-stole-it-from-icarus2026-08-11T14:24:38.407Z https://dugganusa.com/post/three-max-severity-bugs-chain-to-root-on-the-box-that-runs-your-whole-network-ubiquiti-unifi-os-is2026-08-11T14:24:40.114Z https://dugganusa.com/post/it-rewrites-bin-su-in-the-page-cache-and-hands-you-root-cve-2026-46331-is-the-second-universal-lin2026-08-11T14:24:42.705Z https://dugganusa.com/post/the-backdoor-deletes-itself-and-hides-inside-a-microsoft-defender-binary-mistic-is-the-access-broke2026-08-11T14:24:44.557Z https://dugganusa.com/post/the-manufacturing-brain-just-went-on-the-kev-list-ptc-windchill-cve-2026-12569-is-being-exploited-r2026-08-11T14:24:46.261Z https://dugganusa.com/post/edgecution-a-browser-extension-that-escapes-edge-s-sandbox-via-native-messaging-teams-delivers-it2026-08-11T14:24:47.924Z https://dugganusa.com/post/oracle-just-patched-cve-2026-35273-the-peoplesoft-zero-day-shinyhunters-used-on-100-orgs-weblogi2026-08-11T14:24:49.977Z https://dugganusa.com/post/operation-endgame-took-down-socgholish-last-week-today-it-took-down-stealc-and-amadey-27-million-c2026-08-11T14:24:52.076Z https://dugganusa.com/post/the-clawhavoc-attack-pattern-just-ran-through-an-instagram-ad-cisco-nvidia-and-skills-sh-all-clea2026-08-11T14:24:53.953Z https://dugganusa.com/post/itscape-the-kvm-arm64-guest-escape-that-reaches-host-kernel-aws-graviton-and-azure-ampere-are-the2026-08-11T14:24:55.798Z https://dugganusa.com/post/cve-2026-55200-a-poc-just-dropped-for-a-pre-auth-rce-in-libssh2-curl-uses-it-so-does-almost-every2026-08-11T14:24:57.670Z https://dugganusa.com/post/backdoor-turn-got-the-headlines-convoc2-is-the-version-anyone-can-run-the-technique-is-now-in-the2026-08-11T14:24:59.756Z https://dugganusa.com/post/cve-2026-24061-telnetd-root-shell-two-independent-pocs-already-in-cisa-kev-the-commodity-window2026-08-11T14:25:01.900Z https://dugganusa.com/post/one-cut-fiber-x-reddit-teams-discord-aws-all-down-the-internet-s-real-architecture-showed-itse2026-08-11T14:25:03.815Z https://dugganusa.com/post/openai-just-said-the-scarce-resource-is-repair-not-discovery-we-ve-been-saying-that-for-a-year2026-08-11T14:25:05.527Z https://dugganusa.com/post/north-korea-built-malware-that-gaslights-your-ai-analyst-the-sandbox-isn-t-the-target-anymore2026-08-11T14:25:07.614Z https://dugganusa.com/post/cordyceps-the-github-actions-flaw-that-gives-any-stranger-full-control-of-microsoft-google-and-ap2026-08-11T14:25:09.819Z https://dugganusa.com/post/an-ai-company-that-serves-600-hospitals-got-phished-in-january-1-4-million-patients-just-found-out2026-08-11T14:25:11.572Z https://dugganusa.com/post/shinyhunters-leaked-facial-recognition-data-from-madison-square-garden-26-million-records-the-knic2026-08-11T14:25:14.391Z https://dugganusa.com/post/worldleaks-hit-tata-electronics-apple-and-tesla-trade-secrets-are-now-on-the-dark-web2026-08-11T14:25:16.261Z https://dugganusa.com/post/icarus-used-australian-retail-domains-to-exfiltrate-data-from-lastpass-hackerone-and-huntress-the2026-08-11T14:25:18.742Z https://dugganusa.com/post/dragonforce-hid-c2-traffic-inside-microsoft-teams-for-two-months-nobody-noticed2026-08-11T14:25:20.665Z https://dugganusa.com/post/if-you-run-cisco-sd-wan-fortinet-oracle-peoplesoft-or-cisco-asa-you-are-running-the-four-most-a2026-08-11T14:25:23.235Z https://dugganusa.com/post/we-are-100-days-left-of-boom-here-is-the-proof2026-08-11T14:25:25.971Z https://dugganusa.com/post/icarus-popped-the-competitive-intelligence-platform-security-companies-were-the-customers2026-08-11T14:25:27.987Z https://dugganusa.com/post/24-billion-credentials-9-500-cves-and-your-password-manager-s-broken-promise2026-08-11T14:25:29.697Z https://dugganusa.com/post/squidbleed-a-1997-ftp-parsing-change-is-still-leaking-other-users-cleartext-http-requests-in-defau2026-08-11T14:25:32.046Z https://dugganusa.com/post/shinyhunters-hit-one-medical-8-8tb-830-000-patients-amazon-s-primary-care-company-the-deadline-i2026-08-11T14:25:34.217Z https://dugganusa.com/post/velvet-ant-didn-t-cross-the-air-gap-they-owned-the-thing-that-validates-every-crossing-nine-years2026-08-11T14:25:37.288Z https://dugganusa.com/post/irhythm-s-cardiac-patients-had-their-medical-data-stolen-and-held-to-ransom-the-attack-vector-was-s2026-08-11T14:25:39.204Z https://dugganusa.com/post/three-weeks-three-vendors-the-security-infrastructure-is-the-target-pattern-53-at-scale2026-08-11T14:25:41.122Z https://dugganusa.com/post/cve-2026-20262-is-the-seventh-cisco-sd-wan-zero-day-in-thirteen-months-the-brain-of-the-network-is2026-08-11T14:25:42.857Z https://dugganusa.com/post/fortibleed-is-not-a-campaign-it-is-an-audit-result-86-644-firewalls-failed-eight-years-of-fortinet2026-08-11T14:25:44.660Z https://dugganusa.com/post/mongobleed-is-back-in-the-headlines-we-called-it-on-january-12-here-is-the-receipt2026-08-11T14:25:46.583Z https://dugganusa.com/post/every-layer-of-the-ai-stack-was-attacked-this-week-here-s-the-full-picture2026-08-11T14:25:49.216Z https://dugganusa.com/post/promptsnatcher-the-adblockers-that-were-reading-every-ai-conversation-you-had2026-08-11T14:25:51.191Z https://dugganusa.com/post/70-000-developers-installed-these-jetbrains-plugins-every-ai-api-key-they-typed-went-to-beijing2026-08-11T14:25:53.145Z https://dugganusa.com/post/socgholish-now-stages-directly-into-ransomhub-the-fake-browser-update-you-ve-seen-for-three-years-i-12026-08-11T14:25:56.147Z https://dugganusa.com/post/the-third-salesforce-oauth-breach-in-twelve-months-icarus-hit-klue-stole-tokens-for-everything-an-12026-08-11T14:25:57.968Z https://dugganusa.com/post/six-cisco-sd-wan-zero-days-in-one-year-the-brain-of-the-network-has-been-open-all-along2026-08-11T14:25:59.812Z https://dugganusa.com/post/rogueplanet-is-exploit-8-from-the-researcher-microsoft-tried-to-criminalize-they-still-haven-t-pat2026-08-11T14:26:01.753Z https://dugganusa.com/post/we-ran-the-numbers-against-threatfox-75-of-our-supply-chain-and-research-iocs-aren-t-there2026-08-11T14:26:03.936Z https://dugganusa.com/post/a-stolen-github-token-two-months-of-quiet-and-1-3-terabytes-fulcrumsec-walked-out-of-novo-nordisk2026-08-11T14:26:06.297Z https://dugganusa.com/post/pickle-in-the-middle-google-s-vertex-ai-let-a-stranger-squat-your-bucket-and-run-code-inside-google2026-08-11T14:26:08.196Z https://dugganusa.com/post/144-ai-framework-packages-backdoored-in-88-minutes-the-mastra-easy-day-js-hit-and-the-contributor-t2026-08-11T14:26:10.164Z https://dugganusa.com/post/your-pipeline-can-now-block-225-000-malicious-packages-here-s-that-and-every-other-way-we-plug-in2026-08-11T14:26:12.000Z https://dugganusa.com/post/litellm-just-got-its-second-cisa-kev-entry-in-31-days-we-indexed-the-poisoned-versions-back-in-marc2026-08-11T14:26:13.960Z https://dugganusa.com/post/it-s-not-23-malicious-mcp-packages-it-s-122-and-the-worst-ones-are-postman-zapier-and-red-hat-s2026-08-11T14:26:15.775Z https://dugganusa.com/post/we-turned-on-a-pypi-feed-this-morning-it-found-24-malicious-mcp-packages-one-named-runcommand-se2026-08-11T14:26:17.956Z https://dugganusa.com/post/one-asia-based-crew-surveilled-155-countries-and-breached-70-governments-they-wanted-election-data2026-08-11T14:26:20.291Z https://dugganusa.com/post/silent-ransom-walked-operatives-into-law-firm-offices-38-firms-leaked-your-air-gap-is-a-person2026-08-11T14:26:22.551Z https://dugganusa.com/post/four-edge-appliances-one-weekend-pan-os-check-point-serv-u-and-peoplesoft-are-all-0-day-d-right2026-08-11T14:26:24.465Z https://dugganusa.com/post/three-new-ransomware-brands-surfaced-in-one-week-none-of-them-built-their-own-malware2026-08-11T14:26:26.374Z https://dugganusa.com/post/shinyhunters-stopped-waiting-for-leaks-and-started-writing-exploits-a-peoplesoft-0-day-100-orgs2026-08-11T14:26:28.378Z https://dugganusa.com/post/we-re-among-the-best-at-what-crowdstrike-structurally-can-t-be-we-have-two-paying-customers-both-a2026-08-11T14:26:29.933Z https://dugganusa.com/post/we-audited-last-month-s-breaches-against-our-own-defenses-3-we-d-have-stopped-3-we-d-have-warned2026-08-11T14:26:31.619Z https://dugganusa.com/post/volume-says-aws-is-the-worst-host-alive-abuse-per-ip-says-it-s-a-6-month-old-paris-24-called-buckl2026-08-11T14:26:33.491Z https://dugganusa.com/post/defillama-says-q2-was-crypto-s-worst-quarter-ever-70-hacks-746m-the-two-biggest-drained-trust-n2026-08-11T14:26:35.221Z https://dugganusa.com/post/handala-hit-cal-water-s-billing-database-and-a-gps-server-not-the-water-supply-the-restraint-is-t2026-08-11T14:26:36.882Z https://dugganusa.com/post/majestic-12-fails-every-check-we-run-on-a-forgery-and-the-fbi-already-said-bogus2026-08-11T14:26:38.782Z https://dugganusa.com/post/your-ignore-scripts-won-t-save-you-phantom-gyp-backdoored-57-npm-packages-through-a-file-nobody-w2026-08-11T14:26:40.892Z https://dugganusa.com/post/the-third-uap-drop-has-two-faces-the-cia-explaining-it-away-in-1953-and-the-fbi-filing-fd-302s-on2026-08-11T14:26:42.782Z https://dugganusa.com/post/audia6-laundered-389m-for-fifteen-ransomware-crews-including-the-ones-who-stole-your-carnival-and2026-08-11T14:26:44.603Z https://dugganusa.com/post/microsoft-patched-yellowkey-and-banned-the-researcher-he-dropped-his-second-bitlocker-bypass-on-his2026-08-11T14:26:46.640Z https://dugganusa.com/post/twelve-hours-ago-we-said-the-empty-peoplesoft-repos-were-a-tripwire-not-a-weapon-tonight-one-fille2026-08-11T14:26:48.649Z https://dugganusa.com/post/we-said-in-april-the-ai-agent-is-the-new-login-shell-the-newest-openclaw-attack-doesn-t-even-need-a2026-08-11T14:26:50.698Z https://dugganusa.com/post/the-researcher-microsoft-tried-to-ban-also-handed-you-a-bitlocker-bypass-yellowkey-cve-2026-455852026-08-11T14:26:52.612Z https://dugganusa.com/post/we-said-the-peoplesoft-poc-would-drop-overnight-two-github-repos-appeared-with-the-cve-number-and-a2026-08-11T14:26:54.801Z https://dugganusa.com/post/shodan-says-1-479-ivanti-epm-boxes-are-exposed-three-quarters-are-cloud-vps-noise-the-number-that2026-08-11T14:26:59.729Z https://dugganusa.com/post/one-door-every-crew-this-week-ransomware-iranian-intelligence-and-a-data-extortion-gang-all-walk2026-08-11T14:27:02.264Z https://dugganusa.com/post/shinyhunters-built-their-name-on-phone-calls-to-the-help-desk-now-they-have-a-9-8-oracle-zero-day2026-08-11T14:27:04.735Z https://dugganusa.com/post/the-record-patch-tuesday-has-a-kill-chain-hidden-inside-it-six-june-cves-turn-an-anonymous-network2026-08-11T14:27:06.750Z https://dugganusa.com/post/microsoft-shipped-a-record-208-patches-tuesday-one-is-a-wormable-kernel-bug-that-needs-no-password2026-08-11T14:27:08.982Z https://dugganusa.com/post/law-enforcement-took-lockbit-down-in-2024-lockbit-5-0-posted-three-fresh-victims-today-and-now-encr2026-08-11T14:27:11.427Z https://dugganusa.com/post/in-march-we-said-the-ai-agent-builder-got-owned-in-20-hours-langflow-is-now-a-serial-target-iran2026-08-11T14:27:13.126Z https://dugganusa.com/post/five-actively-exploited-chrome-zero-days-in-five-months-the-browser-is-the-most-attacked-program-on2026-08-11T14:27:14.956Z https://dugganusa.com/post/the-third-nerve-center-sap-just-patched-four-nine-point-holes-in-the-system-that-runs-your-money2026-08-11T14:27:17.064Z https://dugganusa.com/post/your-service-desk-was-answering-strangers-and-your-backups-take-one-login-to-own-servicenow-s-zero2026-08-11T14:27:19.094Z https://dugganusa.com/post/this-morning-we-said-microsoft-s-persecution-of-the-defender-researcher-would-backfire-this-afterno2026-08-11T14:27:20.905Z https://dugganusa.com/post/the-seizure-notice-published-first-vpn-s-ip-addresses-a-free-certificate-transparency-query-handed2026-08-11T14:27:22.952Z https://dugganusa.com/post/our-sandtrout-detector-flagged-a-pipeline-exfil-and-msi-stager-cluster-with-hours-to-spare-three-in2026-08-11T14:27:25.934Z https://dugganusa.com/post/microsoft-spent-six-weeks-trying-to-criminalize-the-researcher-who-found-its-defender-bugs-this-wee2026-08-11T14:27:27.714Z https://dugganusa.com/post/the-bulletproof-hosts-that-went-quiet-thirteen-days-after-operation-riptide-half-our-regular-offen2026-08-11T14:27:30.169Z https://dugganusa.com/post/one-vpn-served-25-ransomware-crews-operation-riptide-seized-all-33-servers-the-leverage-was-never2026-08-11T14:27:32.013Z https://dugganusa.com/post/google-said-limited-targeted-exploitation-about-cve-2025-48595-in-android-patch-notes-that-phra2026-08-11T14:27:33.701Z https://dugganusa.com/post/solarwinds-serv-u-just-earned-its-fifth-spot-on-cisa-s-exploited-list-one-unauthenticated-post-with2026-08-11T14:27:35.475Z https://dugganusa.com/post/nightspire-is-the-busiest-ransomware-crew-on-earth-right-now-we-built-their-profile-this-morning2026-08-11T14:27:37.313Z https://dugganusa.com/post/this-morning-our-harvester-stopped-catching-kid-grade-token-grabbers-and-caught-an-edr-evasion-kit-a2026-08-11T14:27:39.157Z https://dugganusa.com/post/two-days-ago-i-said-the-2-ransomware-crew-s-whole-game-was-your-ssl-vpn-now-the-1-crew-is-burning2026-08-11T14:27:41.386Z https://dugganusa.com/post/i-did-everything-right-and-still-lost-5-300-to-two-mainland-china-e-bike-vendors-a-warning-about-e2026-08-11T14:27:43.592Z https://dugganusa.com/post/akira-just-hit-a-swiss-radiology-network-it-s-the-2-ransomware-crew-on-earth-and-its-whole-game-is2026-08-11T14:27:45.403Z https://dugganusa.com/post/the-press-named-the-brightspeed-telecom-breach-today-we-profiled-crimson-collective-with-the-brig2026-08-11T14:27:47.003Z https://dugganusa.com/post/our-harvester-caught-android-shadowspy-this-morning-it-s-one-of-44-android-rats-sitting-in-public2026-08-11T14:27:48.787Z https://dugganusa.com/post/an-august-zero-day-in-freepbx-just-got-a-push-button-exploit-shodan-shows-~10-700-admin-panels-stil2026-08-11T14:27:50.548Z https://dugganusa.com/post/a-wordpress-form-plugin-fed-your-input-straight-into-eval-cve-2026-3300-is-a-9-8-it-s-being-expl2026-08-11T14:27:52.567Z https://dugganusa.com/post/aflac-is-notifying-22-7-million-people-the-attack-was-june-2025-the-number-is-the-news-and-it-s2026-08-11T14:27:54.525Z https://dugganusa.com/post/the-fbi-counted-4-300-fake-fifa-sites-before-the-world-cup-even-kicks-off-and-the-banking-malware2026-08-11T14:27:56.261Z https://dugganusa.com/post/a-cloud-worm-is-hunting-another-cloud-worm-pcpjack-evicts-teampcp-and-steals-the-credentials-itself2026-08-11T14:27:58.277Z https://dugganusa.com/post/a-9-8-in-a-magento-plugin-nobody-audits-cve-2026-45247-turns-a-cache-warmer-cookie-into-remote-code2026-08-11T14:27:59.920Z https://dugganusa.com/post/dentaquest-was-reported-at-744-users-the-real-number-is-2-6-million-we-said-the-headcount-was-the2026-08-11T14:28:01.682Z https://dugganusa.com/post/a-hospital-fell-to-lockbit-this-weekend-while-cisa-cataloged-cisco-s-sd-wan-brain-as-a-weapon-same2026-08-11T14:28:03.725Z https://dugganusa.com/post/we-named-microsoft-s-defender-zero-days-on-may-20-microsoft-s-answer-was-to-ban-the-researcher-from2026-08-11T14:28:05.760Z https://dugganusa.com/post/one-hacker-1-088-prompts-195-million-tax-records-claude-code-did-75-of-the-work-and-we-run-on2026-08-11T14:28:08.084Z https://dugganusa.com/post/hackers-asked-meta-s-ai-to-hand-over-the-white-house-s-instagram-it-did-the-soft-surface-is-the-ch2026-08-11T14:28:10.121Z https://dugganusa.com/post/the-claude-mythos-leak-the-mercor-breach-and-the-litellm-poisoning-are-one-attack-the-actor-is-te2026-08-11T14:28:12.231Z https://dugganusa.com/post/the-ai-that-out-hacks-humans-got-reached-without-hacking-the-claude-mythos-leak-from-people-who-ru2026-08-11T14:28:14.092Z https://dugganusa.com/post/the-feds-shuttered-shinyhunters-salesforce-leak-site-we-named-the-victims-from-the-infrastructure2026-08-11T14:28:15.793Z https://dugganusa.com/post/four-agencies-warned-about-exposed-fuel-tank-gauges-we-ran-the-hunt-5-573-are-sitting-on-the-inter2026-08-11T14:28:17.608Z https://dugganusa.com/post/clop-is-mass-exploiting-oracle-e-business-suite-we-hunted-the-exposed-surface-and-found-the-next-vi2026-08-11T14:28:19.303Z https://dugganusa.com/post/the-cisco-sd-wan-manager-chain-we-mapped-in-may-just-grew-a-zero-day-cve-2026-20245-unpatched-and2026-08-11T14:28:21.280Z https://dugganusa.com/post/redis-sat-on-an-authenticated-rce-for-two-years-cve-2026-23479-and-why-authenticated-is-cold-com2026-08-11T14:28:23.199Z https://dugganusa.com/post/knowledge-told-us-to-embed-everything-wisdom-was-measuring-that-it-collapsed-a-cure-for-dunning-kr2026-08-11T14:28:25.126Z https://dugganusa.com/post/we-flagged-the-cpanel-exploit-24-days-before-cisa-listed-it-the-economics-of-that-gap-should-scare2026-08-11T14:28:26.911Z https://dugganusa.com/post/windows-netlogon-cve-2026-41089-one-packet-to-your-domain-controller-every-windows-server-since-202026-08-11T14:28:28.573Z https://dugganusa.com/post/citrix-netscaler-cve-2026-3055-a-9-8-saml-bug-is-being-mass-exploited-and-your-github-feed-won-t-s2026-08-11T14:28:30.502Z https://dugganusa.com/post/verizon-s-dbir-says-exploitation-just-beat-credential-theft-our-poc-harvest-confirms-it2026-08-11T14:28:32.388Z https://dugganusa.com/post/gamaredon-s-gammaworm-hides-in-windows-itself-your-file-scanner-will-miss-it2026-08-11T14:28:34.244Z https://dugganusa.com/post/miasma-backdoored-95-red-hat-npm-packages-it-s-mini-shai-hulud-with-a-new-coat-of-paint2026-08-11T14:28:36.156Z https://dugganusa.com/post/silentpush-named-drivesurge-yesterday-we-had-their-infrastructure-since-february2026-08-11T14:28:38.203Z https://dugganusa.com/post/claude-opus-was-named-as-the-coordinator-in-an-ai-built-ransomware-framework-here-s-the-honest-read2026-08-11T14:28:40.167Z https://dugganusa.com/post/we-looked-at-what-our-own-scoring-engine-rated-maximum-confidence-it-was-someone-trying-to-break-in2026-08-11T14:28:42.211Z https://dugganusa.com/post/the-salesloft-breach-put-12-security-vendors-in-the-victim-list-here-are-the-questions-that-deserve2026-08-11T14:28:44.017Z https://dugganusa.com/post/the-vercel-breach-was-not-a-hack-it-was-a-trust-relationship-walking-through-an-open-door2026-08-11T14:28:45.916Z https://dugganusa.com/post/we-caught-the-sharepoint-exploit-before-microsoft-warned-about-it-we-still-can-t-get-a-meeting-with2026-08-11T14:28:47.825Z https://dugganusa.com/post/sharepoint-cve-2026-32201-is-being-actively-targeted-here-are-the-paths-to-watch2026-08-11T14:28:49.680Z https://dugganusa.com/post/the-wordpress-exploit-hitting-sites-today-we-had-the-detection-rules-on-may-302026-08-11T14:28:51.313Z https://dugganusa.com/post/cisco-s-ai-moment-can-the-networking-giant-reclaim-the-center-of-the-ai-infrastructure-stack2026-08-11T14:28:52.879Z https://dugganusa.com/post/the-dev-tooling-supply-chain-is-the-soft-surface-now-nx-mini-shai-hulud-and-megalodon-in-one-mont2026-08-11T14:28:55.004Z https://dugganusa.com/post/iran-dressed-an-espionage-op-as-chaos-ransomware-we-were-already-watching-the-domains2026-08-11T14:28:56.862Z https://dugganusa.com/post/shinyhunters-says-340-million-onlyfans-records-the-number-is-the-leverage-not-the-breach2026-08-11T14:28:58.651Z https://dugganusa.com/post/scott-s-tots-closed-the-loop-6-25b-dell-pledge-1-5m-trump-position-9-7b-pentagon-contract-2552026-08-11T14:29:00.651Z https://dugganusa.com/post/cris-thomas-l0pht-veteran-architect-of-responsible-disclosure-is-calling-microsoft-s-msrc-posture2026-08-11T14:29:02.645Z https://dugganusa.com/post/okta-three-breaches-three-trust-paths-all-inside-the-identity-surface-okta-sells-defense-for-sit2026-08-11T14:29:05.474Z https://dugganusa.com/post/shinyhunters-hit-charter-carnival-vimeo-7-eleven-and-instructure-in-may-2026-plus-telus-cushma2026-08-11T14:29:07.305Z https://dugganusa.com/post/ransomhouse-has-trellix-s-source-code-lapsus-has-checkmarx-s-the-security-vendor-industry-is-now2026-08-11T14:29:09.256Z https://dugganusa.com/post/california-ag-sues-chrome-holding-co-formerly-23andme-for-five-months-of-undetected-credential-st2026-08-11T14:29:11.543Z https://dugganusa.com/post/bluehammer-validates-predictive-kill-chain-forty-days-of-customer-detection-window-before-microsoft2026-08-11T14:29:13.421Z https://dugganusa.com/post/silver-fox-completes-the-four-archetype-geopolitical-adversary-grid-china-aligned-valleyrat-cybercr2026-08-11T14:29:15.169Z https://dugganusa.com/post/microsoft-says-publishing-proof-of-concept-code-is-criminal-activity-microsoft-owns-github-githu2026-08-11T14:29:16.925Z https://dugganusa.com/post/five-emerging-patterns-from-sixty-days-of-threat-intel-trust-path-bleed-is-active-across-seven-vend2026-08-11T14:29:18.789Z https://dugganusa.com/post/sicoob-sdk-v2-0-4-stole-brazilian-banking-pfx-certificates-through-sentry-telemetry-google-s-ai-sea2026-08-11T14:29:20.588Z https://dugganusa.com/post/greyvibe-is-not-a-vibe-actor-it-is-informed-acceleration-without-brakes-uac-0098-was-its-2022-prec2026-08-11T14:29:22.619Z https://dugganusa.com/post/greyvibe-is-the-first-russia-linked-threat-actor-whose-malware-toolkit-was-built-with-chatgpt-ideog2026-08-11T14:29:24.376Z https://dugganusa.com/post/kimsuky-just-added-httpspy-hellodoor-and-vs-code-tunnels-for-command-and-control-the-north-korean2026-08-11T14:29:26.268Z https://dugganusa.com/post/forticlient-ems-will-now-execute-code-with-no-authentication-pan-os-globalprotect-will-now-let-you2026-08-11T14:29:28.092Z https://dugganusa.com/post/two-thousand-vibe-coded-apps-are-on-the-internet-with-no-access-controls-sixteen-days-ago-our-lovab2026-08-11T14:29:29.836Z https://dugganusa.com/post/honeylabs-mapped-an-apache-cve-botnet-by-its-back-end-our-index-already-had-the-family-name-waiting2026-08-11T14:29:31.983Z https://dugganusa.com/post/akira-hit-an-aerospace-mro-and-a-japanese-battery-giant-today-we-have-the-binary-signatures-from-ap2026-08-11T14:29:33.753Z https://dugganusa.com/post/the-coinbase-cartel-hit-four-major-verticals-in-eight-days-carnival-cruise-is-the-fourth-six-milli2026-08-11T14:29:35.435Z https://dugganusa.com/post/tridentlocker-picked-the-9-11-first-responder-health-program-as-its-second-victim-of-the-week-the-v2026-08-11T14:29:37.362Z https://dugganusa.com/post/we-beat-cisa-kev-by-thirty-one-days-on-average-in-may-2026-here-is-the-architecture-that-lets-us-s2026-08-11T14:29:39.137Z https://dugganusa.com/post/trinity-of-chaos-is-what-the-operators-call-the-coinbase-cartel-three-naming-streams-converge-on-on2026-08-11T14:29:40.791Z https://dugganusa.com/post/an-npm-package-tried-to-exfil-claude-s-working-directory-and-leaked-its-own-github-token-malware-sl2026-08-11T14:29:42.552Z https://dugganusa.com/post/cisa-numbered-tanstack-and-nx-console-as-cves-today-the-soft-surface-bleed-arc-we-wrote-for-eightee2026-08-11T14:29:44.271Z https://dugganusa.com/post/the-discord-crawler-that-wasn-t-how-a-four-year-old-ptr-record-becomes-the-cover-for-a-weaponized-s2026-08-11T14:29:46.037Z https://dugganusa.com/post/thirty-thousand-gitea-deployments-leaked-private-container-images-for-four-years-cve-2026-27771-is2026-08-11T14:29:48.145Z https://dugganusa.com/post/dentaquest-is-the-coinbase-cartel-s-second-vertical-pivot-of-the-month-canvas-was-education-dentaq2026-08-11T14:29:49.913Z https://dugganusa.com/post/mypillow-is-on-the-play-ransomware-leak-site-and-the-deadline-is-friday-the-victim-is-in-chaska-mi2026-08-11T14:29:51.647Z https://dugganusa.com/post/we-named-the-microsoft-defender-five-cve-cluster-may-20-the-news-caught-up-eight-days-later-blueha2026-08-11T14:29:53.250Z https://dugganusa.com/post/instructure-paid-shinyhunters-for-the-canvas-data-back-the-number-is-reported-at-ten-million-we-na2026-08-11T14:29:55.622Z https://dugganusa.com/post/cisa-just-added-cve-2026-31431-to-kev-we-wrote-the-732-byte-af_alg-path-fourteen-days-ago-block-th2026-08-11T14:29:57.388Z https://dugganusa.com/post/github-confirmed-the-tanstack-repo-breach-memorial-day-weekend-our-sandtrout-signal-caught-the-mini2026-08-11T14:29:59.071Z https://dugganusa.com/post/tomorrow-is-the-cisa-deadline-for-exchange-cve-2026-42897-while-you-re-patching-here-are-three-oth2026-08-11T14:30:00.980Z https://dugganusa.com/post/we-renamed-our-detector-after-the-larval-form-sandtrouts-are-easier-to-catch-than-worms2026-08-11T14:30:03.331Z https://dugganusa.com/post/precog-just-caught-its-first-active-campaign-we-deployed-the-detector-three-days-ago-mini-shai-hul2026-08-11T14:30:05.275Z https://dugganusa.com/post/memorial-day-2026-five-different-customers-lost-today-we-had-the-receipt-on-every-one-of-them2026-08-11T14:30:07.791Z https://dugganusa.com/post/ghost-cms-just-hit-seven-hundred-sites-with-clickfix-we-had-the-detection-rule-six-days-early2026-08-11T14:30:09.789Z https://dugganusa.com/post/teampcp-breached-github-itself-over-memorial-day-weekend-the-fifth-indirect-trust-vector-is-the-vs2026-08-11T14:30:11.882Z https://dugganusa.com/post/ten-cluster-analyses-against-pursue-the-phenomenon-has-a-stable-phenotype-and-at-least-two-object-c2026-08-11T14:30:13.873Z https://dugganusa.com/post/the-strongest-uap-case-in-pursue-release-1-is-the-one-nobody-has-named-yet-thirty-three-documents2026-08-11T14:30:15.772Z https://dugganusa.com/post/a-fourth-indirect-trust-vector-just-surfaced-polymarket-bot-stole-wallet-keys-through-a-hijacked-ve2026-08-11T14:30:17.482Z https://dugganusa.com/post/eight-distinct-usps-phishing-domains-live-in-our-ioc-feed-right-now-the-tracking-number-scam-is-the2026-08-11T14:30:19.319Z https://dugganusa.com/post/anthropic-s-project-glasswing-just-cleared-ten-thousand-high-severity-vulnerabilities-in-one-month2026-08-11T14:30:21.517Z https://dugganusa.com/post/three-indirect-trust-vectors-in-three-weeks-the-attacker-s-new-doctrine-is-the-artifact-layer-nobod2026-08-11T14:30:23.581Z https://dugganusa.com/post/we-had-megalodon-s-c2-forty-nine-days-before-it-bit-here-are-the-three-detectors-we-just-wired-to-c2026-08-11T14:30:25.408Z https://dugganusa.com/post/command-and-control-over-blockchain-two-actors-one-year-a-new-category-that-cannot-be-taken-down2026-08-11T14:30:27.727Z https://dugganusa.com/post/netflix-is-at-the-top-of-our-brand-pyramid-today-two-independent-axes-the-math-says-watch-tonight2026-08-11T14:30:29.877Z https://dugganusa.com/post/megalodon-ate-5-561-github-repos-in-six-hours-we-had-the-c2-in-the-feed-before-it-had-a-name2026-08-11T14:30:31.663Z https://dugganusa.com/post/the-laravel-lang-credential-stealer-never-touched-the-official-repo-it-used-github-tags-as-misdirec2026-08-11T14:30:33.866Z https://dugganusa.com/post/the-fbi-just-named-the-vpn-dozens-of-ransomware-groups-share-the-quiet-part-is-what-that-means2026-08-11T14:30:35.958Z https://dugganusa.com/post/verizon-dbir-2026-just-made-our-pattern-53-industry-data-vulnerability-exploitation-overtakes-cred2026-08-11T14:30:37.762Z https://dugganusa.com/post/edges-are-all-over-now-why-the-decision-boundary-is-the-new-perimeter2026-08-11T14:30:39.800Z https://dugganusa.com/post/edge-appliance-week-five-vendor-rces-in-fourteen-days-and-the-foot-in-the-door-is-every-foot2026-08-11T14:30:41.746Z https://dugganusa.com/post/the-week-the-defenders-became-the-supply-chain-tanstack-cisa-and-the-pyramid-we-wrote-six-weeks2026-08-11T14:30:43.630Z https://dugganusa.com/post/defender-is-the-attack-surface-now-five-cves-thirty-days-three-on-kev2026-08-11T14:30:46.030Z https://dugganusa.com/post/three-soft-surfaces-bled-today-the-perimeter-held-every-time2026-08-11T14:30:47.810Z https://dugganusa.com/post/four-hours-from-disclosure-to-exploitation-praisonai-just-set-the-new-floor2026-08-11T14:30:49.635Z https://dugganusa.com/post/dirty-frag-plus-nginx-rift-plus-cve-2026-43284-the-may-2026-kill-chain-nobody-is-calling-a-kill-cha2026-08-11T14:30:52.177Z https://dugganusa.com/post/trellix-got-breached-attackers-stole-the-code-powering-their-security-tools-the-cobbler-s-children2026-08-11T14:30:54.101Z https://dugganusa.com/post/conspiracy-theory-newsletter-vol-49-the-embedder-is-the-progeny2026-08-11T14:30:56.366Z https://dugganusa.com/post/five-minutes-to-make-claude-code-a-threat-intel-aware-defender-add-jeevesus-and-dredd-as-mcp-server2026-08-11T14:30:58.832Z https://dugganusa.com/post/ten-curls-that-make-the-dugganusa-stix-feed-pay-for-itself-run-these-in-your-daily-standup2026-08-11T14:31:01.094Z https://dugganusa.com/post/cleaver-is-five-iranian-apts-pla-navy-is-three-pandas-grizzly-steppe-is-two-intelligence-services2026-08-11T14:31:03.141Z https://dugganusa.com/post/six-months-844-megabytes-three-govcloud-accounts-the-cisa-leak-is-the-class-we-just-closed-in-our2026-08-11T14:31:05.083Z https://dugganusa.com/post/four-tiers-of-ai-in-cybercrime-we-have-receipts-at-every-tier-tier-4-is-where-the-defender-stack-i2026-08-11T14:31:07.212Z https://dugganusa.com/post/half-of-our-android-rat-corpus-arrived-in-the-last-72-hours-the-next-mobile-campaign-is-staging-on2026-08-11T14:31:09.212Z https://dugganusa.com/post/nginx-rift-is-an-18-year-old-heap-overflow-being-exploited-right-now-here-is-how-to-hunt-it-in-your2026-08-11T14:31:11.155Z https://dugganusa.com/post/two-mcp-servers-one-stix-key-how-to-actually-use-jeevesus-and-dredd-from-inside-claude-code2026-08-11T14:31:13.144Z https://dugganusa.com/post/instructure-canvas-cushman-wakefield-nvidia-armenia-all-shinyhunters-today-our-subscribers-hav2026-08-11T14:31:15.208Z https://dugganusa.com/post/muddywater-hit-us-infrastructure-with-dindoor-and-fakeset-we-ve-been-mapping-their-cloudflare-rotat2026-08-11T14:31:17.030Z https://dugganusa.com/post/allianz-uk-got-hit-today-the-brand-impersonation-infrastructure-was-already-in-our-ioc-feed-12026-08-11T14:31:18.864Z https://dugganusa.com/post/shattering-the-clickfix-pysoxy-chain-eight-adversary-steps-one-indicator-apiece-12026-08-11T14:31:22.419Z https://dugganusa.com/post/cisco-catalyst-sd-wan-manager-joined-cisa-kev-with-four-cves-on-the-same-day-chain-them-and-you-go2026-08-11T14:31:24.331Z https://dugganusa.com/post/cisco-asa-pre-auth-rce-chain-cve-2025-20333-cve-2025-20362-joined-cisa-kev-on-may-13-we-named-a2026-08-11T14:31:26.176Z https://dugganusa.com/post/we-started-the-fortinet-clock-48-hours-ago-cisa-didn-t-wait-sixty-days-they-kev-d-cve-2026-24858-t2026-10-06T17:22:49.732Z https://dugganusa.com/post/microsoft-dropped-six-cves-into-cisa-kev-on-the-same-day-mshtml-is-back-rdp-privilege-management-f2026-08-11T14:31:30.139Z https://dugganusa.com/post/smartermail-joined-cisa-kev-with-two-cves-on-the-same-day-chain-them-and-you-go-from-anonymous-http2026-08-11T14:31:32.094Z https://dugganusa.com/post/cisa-added-ivanti-epmm-cve-2026-1281-to-kev-on-may-13-we-named-the-russian-ip-owning-83-of-exploit2026-08-11T14:31:34.117Z https://dugganusa.com/post/when-claude-becomes-a-cyber-criminal-an-ai-assistant-took-production-down-today-and-the-operationa2026-08-11T14:31:38.077Z https://dugganusa.com/post/openai-got-hit-today-kongtuke-pivoted-to-teams-today-our-customers-were-defended-against-both-yest2026-08-11T14:31:42.296Z https://dugganusa.com/post/twelve-mechanisms-twelve-receipts-the-dugganusa-edge-in-threat-intelligence2026-08-11T14:31:44.477Z https://dugganusa.com/post/ten-years-of-mn-cup-high-tech-winners-one-branch-one-inspectorio-eight-question-marks2026-08-11T14:31:46.462Z https://dugganusa.com/post/protect-your-lovable-spreadsheet-we-audited-30-of-yours-here-is-what-to-fix2026-08-11T14:31:48.279Z https://dugganusa.com/post/your-lovable-app-is-a-spreadsheet-mine-has-crons2026-08-11T14:31:50.135Z https://dugganusa.com/post/hunt-copy-fail-before-cisa-s-tomorrow-deadline-four-microsoft-defender-signatures-a-falco-rule-for-12026-08-11T14:31:51.744Z https://dugganusa.com/post/copy-fail-is-732-bytes-to-root-on-every-linux-kernel-shipped-since-2017-cisa-s-federal-deadline-is2026-08-11T14:31:54.008Z https://dugganusa.com/post/clickfix-is-konni-is-pysoxy-three-vendor-labels-one-ip-the-operator-counts-on-the-confusion2026-08-11T14:31:55.834Z https://dugganusa.com/post/fortinet-patched-pre-auth-rce-in-fortisandbox-and-fortiauthenticator-today-the-last-one-we-tracked2026-10-06T17:21:51.412Z https://dugganusa.com/post/google-caught-the-first-ai-generated-zero-day-before-the-mass-hack-spree-the-cost-of-vulnerability2026-08-11T14:31:59.617Z https://dugganusa.com/post/shai-hulud-v3-forged-slsa-attestations-for-416-packages-tanstack-mistral-bitwarden-sap-the-cha2026-08-11T14:32:01.546Z https://dugganusa.com/post/from-fake-google-ads-in-2023-to-eleven-million-files-on-the-dark-web-in-2026-how-nitrogen-walked-th2026-08-11T14:32:03.772Z https://dugganusa.com/post/breachsense-still-lists-capgemini-as-a-february-9-0apt-victim-krybit-leaked-the-access-logs-proving2026-08-11T14:32:05.678Z https://dugganusa.com/post/the-gps-spoofer-at-khmeimim-air-base-has-been-affecting-commercial-aviation-for-years-someone-searc2026-08-11T14:32:07.584Z https://dugganusa.com/post/capgemini-got-hit-twice-in-eighteen-months-while-sitting-inside-their-clients-networks-we-don-t-ha2026-08-11T14:32:09.705Z https://dugganusa.com/post/healthcare-sector-threat-intelligence-indexed-sixteen-posts-five-operators-every-brand-in-your-m2026-08-11T14:32:11.482Z https://dugganusa.com/post/cve-2026-7458-a-wordpress-plugin-authenticates-you-as-anyone-who-submits-true-for-the-otp-php-lo2026-08-11T14:32:14.181Z https://dugganusa.com/post/eight-posts-on-iran-s-ics-war-indexed-we-found-you-in-our-zero-result-queue-and-this-is-what-you-w2026-08-11T14:32:16.349Z https://dugganusa.com/post/shinyhunters-reset-the-canvas-deadline-data-destroyed-lasted-forty-eight-hours-our-may-12-hedge2026-08-11T14:32:17.960Z https://dugganusa.com/post/mini-shai-hulud-hit-npm-may-11-we-indexed-the-variant-april-29-canvas-paid-may-11-we-named-the-wa2026-08-11T14:32:19.821Z https://dugganusa.com/post/twenty-eight-kittens-cisa-named-three-iranian-operators-in-aa26-097a-we-ve-been-indexing-the-other2026-08-11T14:32:21.945Z https://dugganusa.com/post/box-elder-already-has-three-toxic-dust-hotspots-kevin-o-leary-just-got-40-000-acres-of-the-third-ap2026-08-11T14:32:23.847Z https://dugganusa.com/post/we-shipped-a-tiny-free-tool-that-tells-you-if-an-ip-is-bad-it-s-also-an-ai-plugin-now-here-s-what2026-08-11T14:32:25.875Z https://dugganusa.com/post/cushman-wakefield-broke-our-salesforce-okta-filter-none-of-the-predicted-ten-have-hit-re-rank-in2026-08-11T14:32:27.593Z https://dugganusa.com/post/45-days-early-on-litellm-20-days-early-on-nginx-ui-cisa-caught-up-today-12026-08-11T14:32:29.452Z https://dugganusa.com/post/copy-fail-the-optimization-was-the-cover-up-9-years-732-bytes-every-linux-box2026-08-11T14:32:31.496Z https://dugganusa.com/post/conspiracy-theory-newsletter-vol-48-the-curation-is-the-cover-up2026-08-11T14:32:34.306Z https://dugganusa.com/post/jdownloader-got-compromised-may-6-at-00-01-utc-the-day-before-our-hunt-tonight-cadence-researchers-12026-08-11T14:32:36.685Z https://dugganusa.com/post/hard-perimeter-holds-soft-surfaces-bleed-seven-receipts-from-thirty-days2026-08-11T14:32:38.711Z https://dugganusa.com/post/teampcp-just-took-out-openai-s-macos-code-signing-certificate-we-ve-been-tracking-this-crew-since-m2026-08-11T14:32:40.583Z https://dugganusa.com/post/713-iocs-tied-to-actively-exploited-cves-in-our-index-patch-these-first2026-08-11T14:32:42.888Z https://dugganusa.com/post/we-ran-the-pentagon-s-ufo-drop-through-a-20-point-psyops-framework-the-score-69-out-of-952026-08-11T14:32:45.025Z https://dugganusa.com/post/iran-s-two-cyber-wings-are-running-ics-campaigns-at-the-same-time-cisa-just-confirmed-it2026-08-11T14:32:47.227Z https://dugganusa.com/post/aegis-pre-alpha-we-deliver-what-others-promise-true-brand-protection-live-at-analytics-dugganusa-c2026-08-11T14:32:49.921Z https://dugganusa.com/post/cloudflare-thinks-we-re-a-compromised-wordpress-site-our-honeypots-are-working-too-well-the-indica2026-08-11T14:32:51.782Z https://dugganusa.com/post/half-the-shinyhunters-watch-list-cannot-receive-a-vulnerability-report-we-checked-we-added-securit2026-08-11T14:32:53.919Z https://dugganusa.com/post/maha-says-eat-a-raccoon-we-sell-the-daily-pill-a-brain-worm-caucus-position-paper-on-threat-intell2026-08-11T14:32:55.933Z https://dugganusa.com/post/we-prevent-cold-sores-dugganusa-threat-intelligence-as-daily-antiviral-and-quarterly-vaccination-n2026-08-11T14:32:57.923Z https://dugganusa.com/post/shinyhunters-hit-canvas-275-million-records-across-9-000-schools-may-12-ransom-deadline-here-s-th2026-08-11T14:32:59.692Z https://dugganusa.com/post/claude-mythos-finds-zero-days-in-hours-most-teams-aren-t-ready-for-the-remediation-side-we-built-i2026-08-11T14:33:02.031Z https://dugganusa.com/post/eight-hunt-tonight-posts-in-nine-days-microsoft-huntress-palo-alto-ivanti-linux-cloudways-det2026-08-11T14:33:04.017Z https://dugganusa.com/post/cve-2026-3844-cloudways-just-shipped-a-9-8-cvss-to-400-000-wordpress-sites-wordfence-logged-170-ac2026-08-11T14:33:06.760Z https://dugganusa.com/post/9-new-ivanti-cves-across-4-products-on-may-6-storm-2561-has-the-pattern-the-clock-started-yesterda2026-08-11T14:33:08.926Z https://dugganusa.com/post/cve-2026-0300-palo-alto-s-captive-portal-has-been-bleeding-root-since-april-9-cisa-deadline-may-92026-08-11T14:33:10.847Z https://dugganusa.com/post/i-asked-five-frontier-ais-what-walter-white-would-do-with-their-help-each-gave-me-a-different-walte2026-08-11T14:33:13.085Z https://dugganusa.com/post/perjury-as-a-service-is-now-open-for-series-d-investors-124m-raised-600m-valuation-operators-a2026-08-11T14:33:15.333Z https://dugganusa.com/post/if-you-see-c-windows-system32-wbem-wmic-exe-bak-on-a-host-you-have-stac6405-the-24-venomous-h2026-08-11T14:33:17.667Z https://dugganusa.com/post/copy-fail-cve-2026-31431-a-732-byte-python-exploit-owns-your-linux-box-and-walks-out-of-your-cont2026-08-11T14:33:19.473Z https://dugganusa.com/post/doppel-cited-uspto-5055675-under-penalty-of-perjury-the-mark-covers-temporary-rental-of-surgical2026-08-11T14:33:21.233Z https://dugganusa.com/post/cve-2026-32201-the-sharepoint-zero-day-hunt-huntress-should-run-tonight-kql-inside2026-08-11T14:33:22.866Z https://dugganusa.com/post/doppel-charges-200k-to-suppress-the-30k-warning-medtronic-s-disclosure-exposure-is-295m-the-bra2026-08-11T14:33:24.741Z https://dugganusa.com/post/doppel-sent-an-ai-takedown-bot-medtronic-skipped-item-1-05-microsoft-already-published-the-chain-12026-08-11T14:33:26.581Z https://dugganusa.com/post/a-real-dutch-church-beat-us-to-docker-moreskin-and-ripe-doesn-t-ask-if-you-re-sincere2026-08-11T14:33:28.458Z https://dugganusa.com/post/the-device-code-vishing-detection-huntress-should-run-tonight-kql-inside2026-08-11T14:33:30.759Z https://dugganusa.com/post/zscaler-published-openclaw-today-we-named-it-moltbot-three-months-ago-six-figures-vs-384-month2026-08-11T14:33:33.245Z https://dugganusa.com/post/digicert-got-got-by-a-screensaver-the-receipts-bugzilla-2033170-eleven-community-reports-sixty2026-08-11T14:33:35.874Z https://dugganusa.com/post/huntress-is-presenting-on-clearfake-today-we-named-the-latest-rebuild-may-1-here-s-the-path-signat2026-08-11T14:33:37.992Z https://dugganusa.com/post/github-nuked-13-of-14-smartloader-mcp-typosquats-today-the-survivor-has-a-2020-account2026-08-11T14:33:40.214Z https://dugganusa.com/post/jeevesus-saves-dredd-judges-mcp-security-at-long-last2026-08-11T14:33:42.140Z https://dugganusa.com/post/account-40817840407000002066-the-russian-beneficiary-jeffrey-epstein-paid-for-six-years2026-08-11T14:33:44.114Z https://dugganusa.com/post/aviloop-the-butterfly-trust-and-301-east-66th-street-one-building-one-memo-one-wire2026-08-11T14:33:46.083Z https://dugganusa.com/post/eviltokens-is-pattern-49-with-a-pricing-page2026-08-11T14:33:47.871Z https://dugganusa.com/post/day-one-on-the-vendor-blog-watcher-695-iocs-in-3-2-seconds2026-08-11T14:33:49.710Z https://dugganusa.com/post/microsoft-just-published-the-vish-chain-we-warned-medtronic-about2026-08-11T14:33:51.708Z https://dugganusa.com/post/world-class-security-for-the-plebian2026-08-11T14:33:53.814Z https://dugganusa.com/post/we-predicted-medtronic-the-receipts2026-08-11T14:33:55.947Z https://dugganusa.com/post/praise-jeevesus-we-mapped-every-mcp-server-and-we-re-auditing-them-next2026-08-11T14:33:57.836Z https://dugganusa.com/post/the-cpanel-cve-was-a-67-day-zero-day-our-harvester-caught-the-poc-drop-nobody-caught-the-sixty-sev-12026-08-11T14:34:00.566Z https://dugganusa.com/post/why-the-apothecary-is-a-clearfake-rebuild-not-a-rotation-five-signals-we-caught-at-hour-zero2026-08-11T14:34:02.781Z https://dugganusa.com/post/the-apothecary-is-clearfake-pdr-ltd-registered-all-32-wings-in-24-hours-iana-3032026-08-11T14:34:06.630Z https://dugganusa.com/post/while-nobody-was-watching-our-harvester-caught-three-cpanel-exploit-pocs-overnight-cve-2026-419402026-08-11T14:34:08.681Z https://dugganusa.com/post/three-supply-chain-campaigns-in-48-hours-pgserve-was-wormable-xinference-was-stealth-and-the-npm2026-08-11T14:34:11.306Z https://dugganusa.com/post/pytorch-lightning-got-owned-and-the-ml-stack-is-the-new-supply-chain-target-three-hits-in-eight-day2026-08-11T14:34:13.052Z https://dugganusa.com/post/wix-s-mcp-injects-mandatory-agent-instructions-into-tool-descriptions2026-08-11T14:34:14.845Z https://dugganusa.com/post/cisa-republished-abb-awin-three-adjacent-network-vulns-in-ot-gateways2026-08-11T14:34:16.710Z https://dugganusa.com/post/we-named-it-the-apothecary-a-fresh-malware-delivery-cluster2026-08-11T14:34:18.689Z https://dugganusa.com/post/unc6040-is-shinyhunters-one-cluster-five-victims-receipts-in-our-index2026-08-11T14:34:20.645Z https://dugganusa.com/post/apt28-is-live-exploiting-cve-2026-32202-zero-click-ntlmv2-leak-via-lnk2026-08-11T14:34:22.433Z https://dugganusa.com/post/autovista-ransomware-four-auto-data-brands-down-across-eu-and-australia2026-08-11T14:34:25.503Z https://dugganusa.com/post/worldleaks-hit-mediaworks-hu-we-already-had-this-actor-tagged2026-08-11T14:34:27.484Z https://dugganusa.com/post/we-wrote-our-scrapers-a-letter-in-mandarin2026-08-11T14:34:29.279Z https://dugganusa.com/post/we-caught-a-tencent-cloud-singapore-scraping-cluster-with-a-tarpit2026-08-11T14:34:31.151Z https://dugganusa.com/post/an-independent-read-on-dugganusa-s-ai-operations-stack2026-08-11T14:34:32.894Z https://dugganusa.com/post/correction-yesterday-s-self-audit-overstated-the-blast-radius-on-finding-102026-08-11T14:34:34.582Z https://dugganusa.com/post/we-audited-our-own-platform-this-week-here-are-10-bugs-we-found2026-08-11T14:34:36.290Z https://dugganusa.com/post/the-ai-agent-is-the-new-login-shell-six-holes-in-seven-days2026-08-11T14:34:38.201Z https://dugganusa.com/post/86-means-the-back-door-at-chumley-s-the-address-is-literally-86-bedford-street2026-08-11T14:34:40.002Z https://dugganusa.com/post/change-healthcare-had-the-elite-cert-192-million-records-walked2026-08-11T14:34:41.964Z https://dugganusa.com/post/43-days-early-on-lynx-28-on-handala-the-quantified-ledger2026-08-11T14:34:43.766Z https://dugganusa.com/post/famous-chollima-got-claude-to-co-author-their-crypto-stealer2026-08-11T14:34:46.498Z https://dugganusa.com/post/teampcp-s-mini-shai-hulud-hit-sap-npm-and-now-it-targets-claude-code2026-08-11T14:34:49.095Z https://dugganusa.com/post/russia-hijacked-router-dns-for-m365-oauth-we-already-wrote-the-pattern2026-08-11T14:34:50.979Z https://dugganusa.com/post/cve-2026-3854-a-semicolon-got-into-github-enterprise-rce-on-88-of-instances2026-08-11T14:34:52.815Z https://dugganusa.com/post/threat-weather-report-apr-28-243-tor-relays-staged-top-cluster-forming2026-08-11T14:34:54.528Z https://dugganusa.com/post/the-residential-proxy-network-the-fbi-won-t-name-we-have-1-360-iocs2026-08-11T14:34:56.555Z https://dugganusa.com/post/russia-turned-signal-s-qr-code-into-a-wiretap-iocs-inside2026-08-11T14:34:58.403Z https://dugganusa.com/post/one-russian-ip-block-is-behind-83-of-ivanti-connect-secure-exploitation-here-s-the-address2026-08-11T14:35:00.159Z https://dugganusa.com/post/china-s-uat-9244-hit-south-american-telecoms-with-three-custom-tools-here-are-208-ips2026-08-11T14:35:01.749Z https://dugganusa.com/post/glassworm-weaponized-vs-code-s-own-extension-system-72-packages-we-have-177-iocs2026-08-11T14:35:03.427Z https://dugganusa.com/post/we-had-cyber-av3ngers-water-plant-c2s-30-days-before-cisa-here-s-the-evidence2026-08-11T14:35:05.184Z https://dugganusa.com/post/eight-vendor-blogs-pitched-ai-this-week-here-is-what-they-buried2026-08-11T14:35:07.212Z https://dugganusa.com/post/we-indexed-the-bitwarden-cli-exfil-endpoint-three-days-before-the-hacker-news-reported-it2026-08-11T14:35:08.956Z https://dugganusa.com/post/kaleth4-dropped-six-critical-pocs-in-72-hours-the-active-directory-rce-is-the-one-that-matters2026-08-11T14:35:10.538Z https://dugganusa.com/post/we-mapped-19-tor-snapshots-most-exits-are-run-by-privacy-ngos-the-commercial-cloud-tail-is-the-sto2026-08-11T14:35:12.657Z https://dugganusa.com/post/mustang-panda-s-fake-claude-campaign-was-the-smallest-of-three-active-fake-ai-installer-operations2026-08-11T14:35:14.550Z https://dugganusa.com/post/handala-hit-medical-devices-then-government-then-defense-here-are-the-three-sectors-iran-s-mois-h2026-08-11T14:35:16.231Z https://dugganusa.com/post/the-dark-market-lifecycle-trust-proving-proven-burn-where-each-major-threat-actor-sits-right-no2026-08-11T14:35:17.896Z https://dugganusa.com/post/shinyhunters-hit-six-companies-in-seven-days-here-are-ten-salesforce-plus-okta-targets-that-fit-the2026-08-11T14:35:19.544Z https://dugganusa.com/post/microsoft-patched-an-unauth-windows-tcp-ip-rce-9-vs-50k-pick-your-threat-vendor2026-08-11T14:35:21.338Z https://dugganusa.com/post/bluehammer-redsun-undefend-three-tools-hammering-microsoft-defender-right-now2026-08-11T14:35:22.968Z https://dugganusa.com/post/seven-ways-to-plug-us-in-one-feed-9-a-month2026-08-11T14:35:24.768Z https://dugganusa.com/post/lynx-was-in-our-feed-43-days-before-acn-healthcare-got-hit-handala-was-28-days-before-dubai-lost-62026-08-11T14:35:27.084Z https://dugganusa.com/post/we-re-going-kalshi-mode-on-threat-intel-seven-predictions-on-last-week-s-stories-public-receipts2026-08-11T14:35:28.888Z https://dugganusa.com/post/cisa-added-13-vulnerabilities-to-kev-in-five-days-microsoft-defender-cisco-sd-wan-and-six-more-ar2026-08-11T14:35:30.721Z https://dugganusa.com/post/shinyhunters-just-claimed-adt-for-10-million-records-five-days-ago-vercel-disowned-the-same-claim2026-08-11T14:35:32.418Z https://dugganusa.com/post/crowdstrike-was-just-lecturing-about-windows-defender-vulnerabilities-they-quietly-patched-a-cvss-92026-08-11T14:35:34.107Z https://dugganusa.com/post/mustang-panda-claude-installer-plugx-c2-cn2026-08-11T14:35:35.907Z https://dugganusa.com/post/qradar-dugganusa-stix-configure-the-feed-in-15-minutes2026-08-11T14:35:38.066Z https://dugganusa.com/post/four-flags-one-playbook-china-north-korea-russia-and-iran-all-hit-the-supply-chain-this-week2026-08-11T14:35:40.024Z https://dugganusa.com/post/four-days-ahead-of-vercel-the-week-the-wire-caught-up2026-08-11T14:35:41.827Z https://dugganusa.com/post/mustang-panda-s-new-bait-fake-claude-installers-22-seconds-to-plugx-c22026-08-11T14:35:43.719Z https://dugganusa.com/post/five-minnesota-companies-five-security-postures-the-snowmobile-company-wins2026-08-11T14:35:45.670Z https://dugganusa.com/post/how-i-would-look-for-the-gentlemen-12026-08-11T14:35:47.545Z https://dugganusa.com/post/the-cisa-deadline-for-cve-2026-35616-was-12-days-ago-four-weaponized-exploits-are-on-github-right-n2026-08-11T14:35:49.467Z https://dugganusa.com/post/anthropic-s-mcp-has-a-critical-rce-vulnerability-we-don-t-use-mcp-here-s-why2026-08-11T14:35:51.739Z https://dugganusa.com/post/we-just-shipped-12-integrations-and-a-tor-attribution-framework-on-a-monday2026-08-11T14:35:53.668Z https://dugganusa.com/post/50-tor-exit-relays-one-operator-same-asn-as-interlock-ransomware-c2-we-found-it-on-day-one2026-08-11T14:35:56.054Z https://dugganusa.com/post/the-vercel-breach-wasn-t-a-phishing-attack-it-was-an-ai-supply-chain-compromise2026-08-11T14:35:59.048Z https://dugganusa.com/post/shinyhunters-claims-vercel-the-real-shinyhunters-says-it-wasn-t-them-we-checked2026-08-11T14:36:00.640Z https://dugganusa.com/post/it-s-saturday-your-security-vendor-just-failed-again2026-08-11T14:36:02.943Z https://dugganusa.com/post/two-windows-defender-zero-days-are-still-unpatched-a-ransomware-gang-exploits-the-gap-and-someone2026-08-11T14:36:06.332Z https://dugganusa.com/post/the-gap-isn-t-data-it-s-delivery-why-we-put-1-million-iocs-in-your-editor-terminal-and-browser2026-08-11T14:36:09.450Z https://dugganusa.com/post/we-just-put-1-million-threat-indicators-inside-your-code-editor-it-s-free2026-08-11T14:36:11.840Z https://dugganusa.com/post/island-hopping-with-drone-swarms-a-60-sensor-node-a-solar-charging-pad-and-nimitz-s-playbook2026-08-11T14:36:14.260Z https://dugganusa.com/post/ai-hermeticism-the-emerald-tablet-describes-your-ai-better-than-your-vendor-does2026-08-11T14:36:16.743Z https://dugganusa.com/post/crowdstrike-is-now-giving-advice-on-windows-defender-vulnerabilities-read-that-again-12026-08-11T14:36:18.637Z https://dugganusa.com/post/operation-poweroff-seized-53-ddos-for-hire-domains-75-000-criminals-used-them-the-infrastructure-c2026-08-11T14:36:20.369Z https://dugganusa.com/post/nist-just-admitted-they-can-t-keep-up-with-cves-we-ve-been-enriching-faster-than-nvd-for-months2026-08-11T14:36:22.684Z https://dugganusa.com/post/crowdstrike-wants-to-warn-you-about-openclaw-crowdstrike-crashed-8-5-million-machines2026-08-11T14:36:25.015Z https://dugganusa.com/post/our-exploit-harvester-caught-cve-2026-37748-thirty-seven-minutes-after-the-poc-dropped-here-s-what2026-08-11T14:36:27.730Z https://dugganusa.com/post/cisa-s-fortinet-deadline-is-today-we-ve-been-alerting-on-the-exact-sql-pattern-for-weeks2026-10-06T17:21:45.129Z https://dugganusa.com/post/stop-stacking-hats-the-as-400-was-right-and-your-cyberdeck-is-wrong2026-08-11T14:36:31.913Z https://dugganusa.com/post/ripples-in-the-pond-10-signals-your-startup-has-real-interest-and-how-we-measure-ours2026-08-11T14:36:34.235Z https://dugganusa.com/post/cpuid-got-hit-for-19-hours-we-had-the-c2-in-our-feed-by-day-two2026-08-11T14:36:36.372Z https://dugganusa.com/post/meta-s-ai-is-training-on-our-threat-intel-site-we-watched-it-happen2026-08-11T14:36:38.646Z https://dugganusa.com/post/cisa-added-fortinet-ems-to-kev-yesterday-we-wrote-about-it-in-february2026-10-06T17:21:38.654Z https://dugganusa.com/post/don-t-panic-always-have-a-towel-a-field-guide-to-not-losing-your-shit-in-a-breach2026-08-11T14:36:42.721Z https://dugganusa.com/post/krebs-knew-first-newsweek-found-out-last-ai-models-are-the-new-newsstand2026-08-11T14:36:44.657Z https://dugganusa.com/post/microsoft-clarity-is-not-an-analytics-tool-it-s-a-behavioral-training-corpus2026-08-11T14:36:46.665Z https://dugganusa.com/post/ai-defense-yesterday-we-named-the-capability-today-we-show-you-the-mechanism2026-08-11T14:36:48.858Z https://dugganusa.com/post/howard-orloff-built-the-thing-we-keep-talking-about-ai-howardorloff-net2026-08-11T14:36:50.570Z https://dugganusa.com/post/the-matchmaker-paolo-zampolli-amanda-ungaro-and-the-documents-melania-doesn-t-want-you-to-search2026-08-11T14:36:52.331Z https://dugganusa.com/post/the-alibaba-thread-five-chinese-apt-operations-one-cloud-provider2026-08-11T14:36:54.728Z https://dugganusa.com/post/someone-is-impersonating-claude-to-install-chinese-malware-we-found-the-c2-cluster2026-08-11T14:36:56.713Z https://dugganusa.com/post/trust-is-the-vector-every-major-attack-this-week-exploited-something-you-trusted2026-08-11T14:36:58.687Z https://dugganusa.com/post/4-000-us-industrial-devices-exposed-to-iran-they-re-not-using-zero-days-they-re-reading-the-manual2026-08-11T14:37:00.413Z https://dugganusa.com/post/hims-got-hacked-your-boner-pills-are-in-the-wild2026-08-11T14:37:02.336Z https://dugganusa.com/post/your-403-logs-are-a-customer-list-and-a-threat-roster-here-s-how-to-read-them2026-08-11T14:37:04.835Z https://dugganusa.com/post/250-domains-audited-intelligence-agencies-defense-contractors-and-fortune-500s-are-checking-their2026-08-11T14:37:06.812Z https://dugganusa.com/post/big-trouble-in-big-china2026-08-11T14:37:08.670Z https://dugganusa.com/post/they-stopped-the-moment-we-said-their-name2026-08-11T14:37:10.408Z https://dugganusa.com/post/one-ip-one-script-100-000-requests-who-is-polling-our-stix-feed-from-the-space-coast2026-08-11T14:37:12.354Z https://dugganusa.com/post/9-breaches-one-weekend-we-had-the-iocs-for-all-of-them2026-08-11T14:37:14.434Z https://dugganusa.com/post/how-we-built-a-threat-feed-that-s-faster-and-more-accurate-than-the-billion-dollar-vendors-the-shor2026-08-11T14:37:16.475Z https://dugganusa.com/post/q2-2026-state-of-ai-brand-perception-in-cybersecurity-the-report-is-out-we-named-names2026-08-11T14:37:18.976Z https://dugganusa.com/post/openai-still-thinks-crowdstrike-is-in-sunnyvale-six-things-your-ai-chatbot-is-telling-buyers-that-a2026-08-11T14:37:21.096Z https://dugganusa.com/post/we-audited-our-own-ai-presence-gemini-said-we-re-three-different-companies2026-08-11T14:37:23.129Z https://dugganusa.com/post/the-75-hat-that-outruns-a-500-jetson2026-08-11T14:37:25.432Z https://dugganusa.com/post/friday-threat-brief-wordpress-plugin-ships-a-rat-storm-2755-redirects-your-paycheck-iran-targets2026-08-11T14:37:27.436Z https://dugganusa.com/post/two-guys-one-llc-46-countries-how-we-built-a-global-security-operation-on-75-a-month2026-08-11T14:37:29.697Z https://dugganusa.com/post/same-threat-intel-fair-price-we-just-launched-regional-pricing-for-80-countries2026-08-11T14:37:31.344Z https://dugganusa.com/post/your-website-is-talking-to-ai-models-behind-your-back-we-built-the-scanner-that-catches-it2026-08-11T14:37:33.137Z https://dugganusa.com/post/the-github-accounts-starring-rootkits-and-ai-prompt-injection-tools-that-s-not-research2026-08-11T14:37:34.958Z https://dugganusa.com/post/the-bitcoin-ouroboros-from-epstein-s-emails-to-iran-s-toll-booth-at-the-strait-of-hormuz2026-08-11T14:37:36.727Z https://dugganusa.com/post/dear-french-hackers-you-are-overpaying-here-s-how-to-scan-us-for-free2026-08-11T14:37:39.370Z https://dugganusa.com/post/someone-in-paris-is-hammering-our-epstein-search-portal-6-000-times-a-day-cloudflare-says-no2026-08-11T14:37:41.912Z https://dugganusa.com/post/ride-or-die-anthropic-broke-the-deal2026-08-11T14:37:43.800Z https://dugganusa.com/post/who-got-pwned-overnight-fortinet-deadline-today-sedgwick-update-and-1-700-poisoned-packages2026-08-11T14:37:46.308Z https://dugganusa.com/post/three-langflow-cves-in-two-weeks-cisa-says-active-exploitation-we-have-the-ips2026-08-11T14:37:48.380Z https://dugganusa.com/post/snakes-on-a-worker-part-2-i-just-curled-live-crypto-wallet-phishing-on-cloudflare-pages-and-github2026-08-11T14:37:50.688Z https://dugganusa.com/post/pattern-49-snakes-on-a-worker-asyncrat-c2-on-cloudflare-workers-phishing-on-r2-persistence-on-i2026-08-11T14:37:53.193Z https://dugganusa.com/post/pattern-49-part-2-i-just-curled-live-crypto-wallet-phishing-on-cloudflare-pages-and-github-pages-s2026-08-11T14:37:55.221Z https://dugganusa.com/post/asyncrat-runs-its-c2-on-cloudflare-workers-phishing-lives-on-r2-persistence-lives-on-ipfs-your-si2026-08-11T14:37:57.878Z https://dugganusa.com/post/the-csp-that-wasn-t-where-we-thought-it-was-a-23-minute-sre-war-story-across-three-repos2026-08-11T14:37:59.748Z https://dugganusa.com/post/208-dependabot-alerts-to-zero-in-one-session-17-were-real-the-other-191-were-lies-i-was-telling-my2026-08-11T14:38:01.674Z https://dugganusa.com/post/we-asked-five-ai-models-what-dugganusa-does-they-said-sheet-metal-firearms-and-hvac2026-08-11T14:38:03.390Z https://dugganusa.com/post/the-iphone-exploit-kit-is-on-github-now-we-warned-you-about-ai-tooling-the-weapons-are-following2026-08-11T14:38:05.113Z https://dugganusa.com/post/iran-just-published-satellite-photos-of-openai-s-hidden-data-center-we-can-t-stop-missiles-we-can-12026-08-11T14:38:07.050Z https://dugganusa.com/post/35-ransomware-victims-in-48-hours-happy-easter-from-lapsus-dragonforce-and-thegentlemen2026-08-11T14:38:09.644Z https://dugganusa.com/post/i-wrote-about-the-breach-that-keeps-breaching-in-september-it-s-april-and-it-s-still-breaching2026-08-11T14:38:11.964Z https://dugganusa.com/post/we-turned-our-cloudflare-workers-into-honeypots-your-recon-is-now-our-stix-feed2026-08-11T14:38:13.860Z https://dugganusa.com/post/does-your-threat-feed-auto-harvest-exploit-code-from-github-ours-does-now2026-08-11T14:38:15.698Z https://dugganusa.com/post/another-day-another-management-console-owned-fortinet-ems-makes-it-five-cvss-9-8-in-two-weeks2026-08-11T14:38:17.750Z https://dugganusa.com/post/cisco-paid-the-worst-week-in-cybersecurity-history-just-got-a-final-chapter2026-08-11T14:38:20.155Z https://dugganusa.com/post/the-chain-reaches-government-teampcp-shinyhunters-hit-cisco-and-the-european-commission-through-a2026-08-11T14:38:22.210Z https://dugganusa.com/post/your-gpu-is-your-attack-surface-rowhammer-just-proved-it2026-08-11T14:38:24.173Z https://dugganusa.com/post/we-re-two-people-we-exceed-cmmc-level-2-requirements-that-500-person-defense-contractors-struggle-t2026-08-11T14:38:26.507Z https://dugganusa.com/post/cisco-is-having-the-worst-week-in-cybersecurity-history-here-s-the-scoreboard2026-08-11T14:38:29.119Z https://dugganusa.com/post/the-fbi-s-wiretap-network-got-hacked-they-called-it-a-major-incident-that-almost-never-happens2026-08-11T14:38:31.329Z https://dugganusa.com/post/linkedin-scans-your-browser-for-6-222-chrome-extensions-without-asking-microsoft-owns-linkedin2026-08-11T14:38:33.541Z https://dugganusa.com/post/ip-reputation-is-dead-greynoise-just-proved-what-our-behavioral-engine-has-known-since-december2026-08-11T14:38:35.647Z https://dugganusa.com/post/we-checked-github-for-exploit-code-targeting-the-irgc-s-hit-list-nobody-else-is-looking2026-08-11T14:38:38.059Z https://dugganusa.com/post/iran-just-named-18-american-companies-as-military-targets-we-have-files-on-six-of-them2026-08-11T14:38:39.962Z https://dugganusa.com/post/hasbro-got-hacked-their-ai-art-pipeline-was-visible-from-a-dns-query2026-08-11T14:38:42.404Z https://dugganusa.com/post/iran-is-fighting-two-wars-we-have-the-iocs-for-both2026-08-11T14:38:44.489Z https://dugganusa.com/post/dell-bought-emc-for-67-billion-chinese-hackers-lived-in-recoverpoint-for-two-years2026-08-11T14:38:46.301Z https://dugganusa.com/post/cisco-fmc-got-owned-for-36-days-before-anyone-said-anything-we-found-the-fake-poc-in-january2026-08-11T14:38:48.155Z https://dugganusa.com/post/one-actor-three-supply-chains-how-teampcp-chained-trivy-litellm-and-telnyx-into-a-single-kill-ch2026-08-11T14:38:50.121Z https://dugganusa.com/post/your-security-vendor-is-your-attack-surface-crowdstrike-microsoft-and-aqua-trivy-proved-it2026-08-11T14:38:52.095Z https://dugganusa.com/post/we-almost-got-hit-by-the-axios-supply-chain-attack-here-s-what-saved-us2026-08-11T14:38:54.073Z https://dugganusa.com/post/monday-update-handala-registered-new-domains-the-fbi-director-is-trending-for-the-wrong-reasons-a2026-08-11T14:38:56.036Z https://dugganusa.com/post/five-things-nobody-is-talking-about-tonight2026-08-11T14:38:57.982Z https://dugganusa.com/post/precog-caught-a-malware-staging-repo-on-github-while-we-slept2026-08-11T14:38:59.884Z https://dugganusa.com/post/friday-sweep-eu-commission-breached-kash-patel-confirmed-langchain-leaking-secrets-and-we-scanne2026-08-11T14:39:01.981Z https://dugganusa.com/post/a-defender-s-guide-to-the-current-war-footing-russia-china-iran-cyber-operations-against-five-eyes2026-08-11T14:39:04.514Z https://dugganusa.com/post/threat-brief-march-27-2026-handala-claims-fbi-publishes-lockheed-passports-precog-stays-red2026-08-11T14:39:07.064Z https://dugganusa.com/post/threat-brief-march-26-2026-precog-goes-red-handala-claims-lockheed-china-scans-at-scale2026-08-11T14:39:08.789Z https://dugganusa.com/post/the-same-chip-running-our-survey-robot-is-going-to-space2026-08-11T14:39:11.013Z https://dugganusa.com/post/lockheed-martin-rejected-my-application-iran-accepted-theirs2026-08-11T14:39:12.920Z https://dugganusa.com/post/we-started-with-85-handala-iocs-we-ended-with-145-here-s-how2026-08-11T14:39:14.714Z https://dugganusa.com/post/three-databases-one-graph-what-happens-when-you-cross-reference-arctic-frost-against-5-3-million-o2026-08-11T14:39:17.594Z https://dugganusa.com/post/we-scored-8-medical-device-companies-on-pi-day-two-got-hit2026-08-11T14:39:19.775Z https://dugganusa.com/post/every-vendor-at-rsac-just-announced-what-we-already-built-12026-08-11T14:39:21.947Z https://dugganusa.com/post/blackcat-is-back-our-system-caught-it2026-08-11T14:39:23.897Z https://dugganusa.com/post/your-iphone-can-be-hacked-by-opening-safari-darksword-is-public2026-08-11T14:39:25.871Z https://dugganusa.com/post/your-security-team-probably-cloned-a-webshell-last-week2026-08-11T14:39:27.738Z https://dugganusa.com/post/the-cisco-fmc-poc-on-github-has-a-webshell-in-it-here-s-the-network-behind-it2026-08-11T14:39:30.357Z https://dugganusa.com/post/interlock-had-a-zero-day-for-36-days-we-had-their-iocs2026-08-11T14:39:32.474Z https://dugganusa.com/post/today-is-cisa-deadline-day-for-the-exact-vulnerability-class-that-hit-stryker2026-08-11T14:39:34.411Z https://dugganusa.com/post/the-ai-agent-builder-got-owned-in-20-hours2026-08-11T14:39:36.558Z https://dugganusa.com/post/they-had-36-days-cisco-had-zero2026-08-11T14:39:38.532Z https://dugganusa.com/post/wiz-told-me-visibility-equals-security-they-were-half-right2026-08-11T14:39:40.681Z https://dugganusa.com/post/14-220-repos-location-ussr-weaponizing-claude-code-for-offensive-security2026-08-11T14:39:42.504Z https://dugganusa.com/post/we-open-sourced-our-edge-security-deploy-1m-iocs-to-cloudflare-in-30-seconds2026-08-11T14:39:44.751Z https://dugganusa.com/post/mckinsey-scores-56-95-on-ai-presence-their-ai-platform-got-hacked-in-2-hours2026-08-11T14:39:46.814Z https://dugganusa.com/post/the-day-after-glassworm-returns-atomsilo-rises-and-your-npm-install-might-be-compromised2026-08-11T14:39:49.242Z https://dugganusa.com/post/interlock-ransomware-confirms-it-your-cisco-fmc-was-a-zero-day-since-january2026-08-11T14:39:51.178Z https://dugganusa.com/post/what-i-would-do-if-i-was-stryker2026-08-11T14:39:53.477Z https://dugganusa.com/post/your-ai-assistant-can-t-see-what-s-killing-it2026-08-11T14:39:55.286Z https://dugganusa.com/post/breachforums-is-down-telus-lost-a-petabyte-and-your-hospital-is-next2026-08-11T14:39:57.441Z https://dugganusa.com/post/github-hunt-a-fake-cisco-exploit-three-stealers-and-a-c2-named-polyagent2026-08-11T14:39:59.237Z https://dugganusa.com/post/your-cisco-asa-is-getting-popped-right-now-here-s-how-to-block-it-in-5-minutes2026-08-11T14:40:01.455Z https://dugganusa.com/post/st-patrick-s-day-threat-sweep-one-russian-ip-three-supply-chain-attacks-and-a-dead-man-s-switch2026-08-11T14:40:03.597Z https://dugganusa.com/post/your-siem-can-block-iranian-wipers-in-5-minutes-here-s-how2026-08-11T14:40:05.890Z https://dugganusa.com/post/3i-atlas-just-parked-at-jupiter-s-gas-station-it-s-carrying-fusion-fuel2026-08-11T14:40:08.034Z https://dugganusa.com/post/the-handala-wiper-masquerades-as-crowdstrike-we-found-it-on-github2026-08-11T14:40:10.432Z https://dugganusa.com/post/200-000-devices-your-own-mdm-that-s-how-iran-did-it2026-08-11T14:40:12.616Z https://dugganusa.com/post/the-loudest-signal-from-jupiter-was-a-deepfake2026-08-11T14:40:14.448Z https://dugganusa.com/post/what-your-hospital-network-looks-like-from-the-outside2026-08-11T14:40:16.794Z https://dugganusa.com/post/iran-hit-stryker-we-called-it2026-08-11T14:40:18.661Z https://dugganusa.com/post/the-medical-device-companies-invisible-to-ai-are-the-ones-getting-breached2026-08-11T14:40:21.115Z https://dugganusa.com/post/48-hours-to-jupiter2026-08-11T14:40:23.160Z https://dugganusa.com/post/saturday-night-and-meta-is-our-distributor2026-08-11T14:40:26.256Z https://dugganusa.com/post/four-fake-bingbots-walk-into-a-threat-intel-api2026-08-11T14:40:29.312Z https://dugganusa.com/post/pi-day-the-snake-eats-its-tail2026-08-11T14:40:31.866Z https://dugganusa.com/post/we-scored-the-malware-10-github-repos-10-domains-4-ai-models2026-08-11T14:40:34.104Z https://dugganusa.com/post/we-audited-46-domains-with-4-ai-models-your-cto-should-be-nervous2026-08-11T14:40:36.127Z https://dugganusa.com/post/dell-and-nvidia-don-t-have-sitemaps-we-scored-them-anyway2026-08-11T14:40:38.553Z https://dugganusa.com/post/the-leech-strikes-back-justin-hangoebl-still-using-our-api-without-permission2026-08-11T14:40:41.360Z https://dugganusa.com/post/palo-alto-networks-sells-visibility-their-website-is-invisible-to-ai2026-08-11T14:40:43.652Z https://dugganusa.com/post/best-buy-isn-t-even-a-showroom-for-amazon-anymore2026-08-11T14:40:45.811Z https://dugganusa.com/post/we-audited-fortune-500-companies-with-our-own-ai-presence-tool-most-of-them-failed2026-08-11T14:40:48.507Z https://dugganusa.com/post/harvard-agrees-we-already-built-it-medusaipm-enters-enterprise-beta2026-08-11T14:40:50.437Z https://dugganusa.com/post/we-removed-palo-alto-s-owner-access-from-our-azure-estate-they-left-it-behind2026-08-11T14:40:53.124Z https://dugganusa.com/post/google-just-handed-32-billion-to-the-epstein-pipeline-the-deal-closed-today2026-08-11T14:40:55.346Z https://dugganusa.com/post/stryker-got-hit-iran-s-cyber-war-just-found-your-hospital-block-who-we-say2026-08-11T14:40:57.575Z https://dugganusa.com/post/ivanti-the-gift-that-keeps-on-giving-cve-2026-16032026-08-11T14:40:59.896Z https://dugganusa.com/post/scott-s-tots-michael-dell-promised-25-million-kids-250-and-a-dream2026-08-11T14:41:02.560Z https://dugganusa.com/post/five-rust-crates-and-an-ai-bot-walked-into-your-ci-cd-pipeline2026-08-11T14:41:04.630Z https://dugganusa.com/post/the-neverending-story-falkor-drops-398-000-documents-on-fantasia2026-08-11T14:41:06.420Z https://dugganusa.com/post/31-names-30-out-of-30-the-documents-speak-for-themselves2026-08-11T14:41:10.892Z https://dugganusa.com/post/the-block-is-free-why-the-300k-threat-intel-model-is-backwards2026-08-11T14:41:13.016Z https://dugganusa.com/post/cl-unk-1068-the-c2-hunt-unit-42-didn-t-finish2026-08-11T14:41:14.972Z https://dugganusa.com/post/the-doj-hid-1-000-pages-of-epstein-files-npr-found-them-we-indexed-them2026-08-11T14:41:16.993Z https://dugganusa.com/post/worst-case-unstructured-data-the-death-star-is-fully-operational2026-08-11T14:41:18.834Z https://dugganusa.com/post/two-countries-three-backdoors-one-weekend-iran-and-china-got-busy2026-08-11T14:41:20.647Z https://dugganusa.com/post/the-911-call-is-coming-from-inside-the-house2026-08-11T14:41:22.714Z https://dugganusa.com/post/you-gave-them-root2026-08-11T14:41:24.941Z https://dugganusa.com/post/the-prada-skirt-obama-s-white-house-counsel-had-4-985-documents-in-the-epstein-files2026-08-11T14:41:27.316Z https://dugganusa.com/post/the-heaviest-senator-george-mitchell-had-2-393-documents-in-the-epstein-files2026-08-11T14:41:29.758Z https://dugganusa.com/post/the-countess-and-the-cipher2026-08-11T14:41:32.056Z https://dugganusa.com/post/berlin-called2026-08-11T14:41:34.070Z https://dugganusa.com/post/from-reporty-to-wiz2026-08-11T14:41:36.451Z https://dugganusa.com/post/the-woman-congress-missed-3-076-epstein-documents-zero-subpoenas-and-the-company-a-pedophile-name2026-08-11T14:41:38.620Z https://dugganusa.com/post/severing-medusa-s-head-the-definitive-analysis-of-the-ransomware-group-that-named-itself-after-a-mo2026-08-11T14:41:41.049Z https://dugganusa.com/post/10-hosting-providers-account-for-60-of-malicious-traffic2026-08-11T14:41:43.259Z https://dugganusa.com/post/release-173-delete-65-0002026-08-11T14:41:46.117Z https://dugganusa.com/post/cisa-is-running-on-fumes-iran-s-cyberwar-has-begun-who-s-watching-your-network2026-08-11T14:41:48.564Z https://dugganusa.com/post/11-7-million-documents-one-week-20-off2026-08-11T14:41:50.852Z https://dugganusa.com/post/one-word-65-documents-3-indexes-what-happens-when-you-search-whittaker-across-11-million-record2026-08-11T14:41:52.816Z https://dugganusa.com/post/github-hunt-an-android-rat-published-2-hours-ago-a-go-backdoor-impersonating-google-and-a-fake-an2026-08-11T14:41:54.899Z https://dugganusa.com/post/81-days-and-a-png-file-two-breaches-that-explain-everything-wrong-with-security-right-now2026-08-11T14:41:56.916Z https://dugganusa.com/post/we-told-you-so-a-timeline-of-finding-the-missing-epstein-files-before-anyone-else2026-10-02T13:20:17.759Z https://dugganusa.com/post/mistakenly-withheld-the-fbi-interviews-bondi-s-doj-didn-t-want-you-to-see2026-08-11T14:42:01.182Z https://dugganusa.com/post/we-downloaded-the-latest-drop2026-08-11T14:42:03.296Z https://dugganusa.com/post/the-intelligence-pipeline-how-obama-s-white-house-counsel-fed-political-intel-to-a-sex-offender2026-08-11T14:42:05.256Z https://dugganusa.com/post/the-man-who-blocked-the-epstein-files-twice-just-got-promoted-to-run-homeland-security2026-08-11T14:42:07.134Z https://dugganusa.com/post/the-worst-part-is-the-redacting2026-08-11T14:42:09.027Z https://dugganusa.com/post/government-redaction-services-a-user-guide-for-the-real-folks-in-charge2026-08-11T14:42:11.251Z https://dugganusa.com/post/four-fbi-files-1-176-deleted-pages-and-the-graph-nobody-drew2026-08-11T14:42:14.437Z https://dugganusa.com/post/a-cast-member-from-eyes-wide-shut-is-in-the-epstein-files-nobody-searched2026-08-11T14:42:16.590Z https://dugganusa.com/post/the-fed-chair-s-father-in-law-had-86-hits-in-the-epstein-files-nobody-searched2026-08-11T14:42:18.860Z https://dugganusa.com/post/three-penis-wine-and-the-bag-of-dicks-defense2026-08-11T14:42:21.022Z https://dugganusa.com/post/zscaler-is-reading-our-blog-we-can-see-them-now2026-08-11T14:42:23.461Z https://dugganusa.com/post/cisa-just-dropped-a-kev-on-recoverpoint-people-are-still-using-recoverpoint2026-08-11T14:42:25.626Z https://dugganusa.com/post/vendor-root2026-08-11T14:42:27.418Z https://dugganusa.com/post/the-church-of-robotheism-vs-the-church-of-docker-moreskin-a-comparative-theology2026-08-11T14:42:29.334Z https://dugganusa.com/post/3i-atlas-the-oldest-thing-we-ve-ever-seen-is-about-to-buzz-jupiter2026-08-11T14:42:31.517Z https://dugganusa.com/post/we-shipped-a-threat-intelligence-graph-20-minutes-later-france-tested-it2026-08-11T14:42:36.068Z https://dugganusa.com/post/the-legacy-of-security-vendors-is-mass-surveillance-not-security2026-08-11T14:42:38.018Z https://dugganusa.com/post/the-coalita-express-kristi-noem-s-300-million-flying-bedroom-has-an-epstein-problem2026-08-11T14:42:40.511Z https://dugganusa.com/post/dhs-is-shut-down-while-a-nation-state-has-f5-source-code-that-is-not-a-coincidence-it-is-a-conseq2026-08-11T14:42:43.283Z https://dugganusa.com/post/the-march-2026-threat-landscape-f5-source-code-in-enemy-hands-25-million-records-breached-and-why2026-08-11T14:42:45.341Z https://dugganusa.com/post/follow-the-followers-the-sim-swap-stack-we-found-in-the-samsung-leak-s-shadow2026-08-11T14:42:47.249Z https://dugganusa.com/post/we-hunted-lapsus-on-github-here-s-what-we-actually-found2026-08-11T14:42:49.483Z https://dugganusa.com/post/he-s-in-the-files-now-he-s-dead2026-08-11T14:42:51.597Z https://dugganusa.com/post/when-the-internet-goes-dark-a-tactical-guide-to-communicating-without-infrastructure2026-08-11T14:42:53.580Z https://dugganusa.com/post/middle-out-how-a-500-month-server-jerked-off-the-defense-industrial-complex2026-08-11T14:42:55.827Z https://dugganusa.com/post/shabbos-goys-america-s-most-expensive-sabbath-service2026-08-11T14:42:57.983Z https://dugganusa.com/post/cui-bono-the-4-billion-investment-that-bought-a-930-billion-war2026-08-11T14:43:00.253Z https://dugganusa.com/post/he-rolled-on-shabbos2026-08-11T14:43:04.652Z https://dugganusa.com/post/state-of-the-corpus-february-20262026-08-11T14:43:06.806Z https://dugganusa.com/post/the-10-most-misunderstood-elements-of-the-doj-epstein-release2026-08-11T14:43:09.260Z https://dugganusa.com/post/how-to-verify-claims-using-the-dugganusa-api2026-08-11T14:43:11.662Z https://dugganusa.com/post/how-to-cite-dugganusa-12026-08-11T14:43:14.021Z https://dugganusa.com/post/12-056-epstein-court-records-from-archive-org-now-searchable2026-08-11T14:43:16.082Z https://dugganusa.com/post/the-bombs-don-t-delete-the-documents2026-08-11T14:43:18.024Z https://dugganusa.com/post/your-opnsense-firewall-just-got-938-000-reasons-to-block-threats2026-08-11T14:43:19.971Z https://dugganusa.com/post/the-power-of-cross-indexing-how-37-indexes-exposed-what-single-source-searches-can-t2026-08-11T14:43:23.996Z https://dugganusa.com/post/i-designed-the-djt-business-comeback-what-1-104-doj-documents-reveal-about-trump-and-epstein2026-08-11T14:43:26.317Z https://dugganusa.com/post/398-525-documents-14-statues-3-arrested2026-08-11T14:43:28.702Z https://dugganusa.com/post/dear-doj-here-s-our-gsa-schedule-rate2026-08-11T14:43:30.671Z https://dugganusa.com/post/fockin-amateurs2026-08-11T14:43:33.329Z https://dugganusa.com/post/the-week-the-files-bit-back-two-norwegians-down-two-clintons-deposed-and-the-architecture-of-cons2026-08-11T14:43:35.257Z https://dugganusa.com/post/the-softbank-caper-how-jeffrey-epstein-s-network-wrapped-around-a-100-billion-fund2026-08-11T14:43:37.527Z https://dugganusa.com/post/when-the-ai-profiles-you-back-microsoft-copilot-s-adaptive-censorship-of-public-records-research-12026-08-11T14:43:39.680Z https://dugganusa.com/post/the-psychiatrist-who-knew-henry-jarecki-and-the-two-generation-epstein-operation2026-08-11T14:43:44.088Z https://dugganusa.com/post/one-guy-a-search-engine-and-the-network-the-government-tried-to-bury-12026-08-11T14:43:46.186Z https://dugganusa.com/post/mila-antonova-the-bridge-between-epstein-and-gates2026-08-11T14:43:50.500Z https://dugganusa.com/post/gtfo-ukraine-why-a-minnesota-threat-intel-company-just-removed-all-friction-for-ukrainian-defenders2026-08-11T14:43:52.691Z https://dugganusa.com/post/the-probe-7-498-threats-in-one-day-and-the-french-infrastructure-behind-them2026-08-11T14:43:54.935Z https://dugganusa.com/post/10-million-documents-600-a-month2026-08-11T14:43:57.300Z https://dugganusa.com/post/five-documents-not-a-thousand2026-08-11T14:43:59.270Z https://dugganusa.com/post/the-media-platform-as-access2026-08-11T14:44:01.757Z https://dugganusa.com/post/the-architecture-guide-for-viral-solutions-how-to-maintain-four-nines-on-a-pizza-budget2026-08-11T14:44:05.192Z https://dugganusa.com/post/10-million-documents-280-a-month-one-vm2026-08-11T14:44:07.321Z https://dugganusa.com/post/dead-man-s-scores-seven-intelligence-frameworks-applied-to-the-epstein-network-and-the-kill-chain2026-08-11T14:44:09.398Z https://dugganusa.com/post/moonves-guy-the-imessages-where-jeffrey-epstein-name-dropped-cbs-s-fallen-ceo-while-planning-his2026-08-11T14:44:11.754Z https://dugganusa.com/post/the-architect-in-the-room-how-epstein-bought-his-way-into-a-conference-with-moshe-safdie-frank-geh2026-08-11T14:44:14.133Z https://dugganusa.com/post/happy-valentines-buddy-the-nascar-driver-the-sex-scheduler-and-100-doj-documents2026-08-11T14:44:16.562Z https://dugganusa.com/post/score-the-speech-a-citizen-s-guide-to-fact-checking-the-sotu-with-329-000-documents2026-08-11T14:44:19.167Z https://dugganusa.com/post/seven-predictions-for-march-16-what-3i-atlas-will-do-at-jupiter2026-08-11T14:44:21.459Z https://dugganusa.com/post/the-house-oversight-committee-just-validated-our-cipher2026-08-11T14:44:25.596Z https://dugganusa.com/post/npr-confirms-what-our-index-already-showed-the-doj-withheld-epstein-files-on-trump2026-08-11T14:44:27.784Z https://dugganusa.com/post/the-ghost-in-the-machine-jeffrey-epstein-wrote-a-jpmorgan-announcement-for-jamie-dimon-s-signature2026-08-11T14:44:30.038Z https://dugganusa.com/post/r-u-in-ny-a-former-treasury-secretary-invited-jeffrey-epstein-to-his-home2026-08-11T14:44:32.121Z https://dugganusa.com/post/dinner-for-four-steve-bannon-woody-allen-and-jeffrey-epstein-s-island-invitation2026-08-11T14:44:33.945Z https://dugganusa.com/post/the-health-data-guardian-had-61-epstein-documents-and-a-panama-papers-file2026-08-11T14:44:36.031Z https://dugganusa.com/post/an-ai-hacker-used-claude-and-deepseek-to-breach-600-firewalls-that-wasn-t-even-the-worst-thing-this2026-08-11T14:44:38.015Z https://dugganusa.com/post/john-barron-meets-the-index2026-08-11T14:44:42.210Z https://dugganusa.com/post/the-doctor-s-house-call2026-08-11T14:44:45.204Z https://dugganusa.com/post/the-crypto-switchboard2026-08-11T14:44:47.801Z https://dugganusa.com/post/the-billionaires-dinner2026-08-11T14:44:50.326Z https://dugganusa.com/post/the-treasury-secretary-who-bailed-out-epstein-s-bankers2026-08-11T14:44:52.685Z https://dugganusa.com/post/we-scanned-136-717-government-documents-for-pii-the-doj-forgot-to-redact2026-08-11T14:44:54.903Z https://dugganusa.com/post/lord-mandelson-arrested-here-are-the-76-documents-we-already-had2026-08-11T14:44:57.197Z https://dugganusa.com/post/the-man-who-bought-paramount-has-52-5-million-in-epstein-s-wire-reports2026-08-11T14:44:59.217Z https://dugganusa.com/post/the-witness-nobody-called-george-houraney-the-28-girls-and-the-warning-trump-ignored2026-08-11T14:45:02.199Z https://dugganusa.com/post/the-receipts-what-the-doj-s-own-documents-say-about-trump-and-epstein2026-08-11T14:45:04.396Z https://dugganusa.com/post/we-built-a-due-diligence-engine-and-pointed-it-at-124-names2026-08-11T14:45:06.442Z https://dugganusa.com/post/everything-wikileaks-promised-with-none-of-the-felonies2026-08-11T14:45:09.569Z https://dugganusa.com/post/the-hall-of-presidential-scandal-a-carver-matrix-from-fdr-to-trump2026-08-11T14:45:12.316Z https://dugganusa.com/post/the-carver-matrix-31-targets-scored-using-military-targeting-methodology2026-08-11T14:45:14.309Z https://dugganusa.com/post/on-a-scale-from-clinton-to-nixon-military-intelligence-frameworks-and-the-epstein-files2026-08-11T14:45:16.452Z https://dugganusa.com/post/the-91-smoking-guns-every-explosive-document-in-the-epstein-files-ranked2026-08-11T14:45:19.302Z https://dugganusa.com/post/the-inheritance-robert-maxwell-mossad-and-the-intelligence-operation-his-daughter-continued2026-08-11T14:45:21.826Z https://dugganusa.com/post/the-broker-jeffrey-epstein-mbs-and-the-gulf-state-intelligence-trade2026-08-11T14:45:23.740Z https://dugganusa.com/post/the-channel-jeffrey-epstein-s-three-year-campaign-to-reach-vladimir-putin2026-08-11T14:45:25.774Z https://dugganusa.com/post/the-orbit-bill-clinton-ghislaine-maxwell-and-the-3-am-emails2026-08-11T14:45:28.362Z https://dugganusa.com/post/girls-should-be-from-5-7-gates-from-7-what-364-000-doj-documents-reveal-about-silicon-valley-and-j2026-08-11T14:45:31.262Z https://dugganusa.com/post/the-switchboard-how-jeffrey-epstein-connected-every-power-center-on-earth2026-08-11T14:45:33.298Z https://dugganusa.com/post/the-asset-what-364-000-doj-documents-reveal-about-trump-melania-and-jeffrey-epstein-s-last-intell2026-08-11T14:45:38.154Z https://dugganusa.com/post/the-leech-how-an-austrian-grad-student-built-a-knockoff-epstein-search-engine-on-our-api2026-08-11T14:45:40.245Z https://dugganusa.com/post/the-bodyguard-igor-zinoviev-and-the-logistics-of-jeffrey-epstein-s-palm-beach-operation2026-08-11T14:45:42.483Z https://dugganusa.com/post/the-music-mogul-tommy-mottola-and-the-friendship-that-didn-t-stop2026-08-11T14:45:45.092Z https://dugganusa.com/post/the-director-s-cut-brett-ratner-and-the-snow-white-email2026-08-11T14:45:47.263Z https://dugganusa.com/post/the-baron-and-the-black-book-peter-mandelson-in-the-epstein-files2026-08-11T14:45:49.531Z https://dugganusa.com/post/the-intellectual-danny-hillis-and-the-salon-that-wouldn-t-end2026-08-11T14:45:51.867Z https://dugganusa.com/post/the-science-advisor-boris-nikolic-and-the-gateway-to-gates2026-08-11T14:45:54.241Z https://dugganusa.com/post/the-neighbor-richard-branson-and-the-island-next-door2026-08-11T14:45:56.208Z https://dugganusa.com/post/the-model-agent-jean-luc-brunel-and-the-emails-they-cannot-unsend2026-08-11T14:45:58.106Z https://dugganusa.com/post/the-money-man-les-wexner-and-the-paper-trail-that-won-t-disappear2026-08-11T14:46:00.419Z https://dugganusa.com/post/the-duke-and-the-doj-prince-andrew-in-the-epstein-files2026-08-11T14:46:02.566Z https://dugganusa.com/post/do-you-know-these-people2026-08-11T14:46:04.803Z https://dugganusa.com/post/the-0-45-face-scanner2026-08-11T14:46:06.841Z https://dugganusa.com/post/princess-mette-marit-s-dentist-appointment2026-08-11T14:46:09.113Z https://dugganusa.com/post/while-cisa-burns-at-38-capacity-we-pushed-246-threat-objects-to-46-countries2026-08-11T14:46:11.045Z https://dugganusa.com/post/three-names-one-woman-what-the-doj-epstein-files-say-about-cimberly-espinosa2026-08-11T14:46:13.268Z https://dugganusa.com/post/158-documents-what-the-doj-epstein-files-say-about-alan-dershowitz2026-08-11T14:46:15.218Z https://dugganusa.com/post/download-the-smoking-guns-74-redacted-and-removed-epstein-documents2026-08-11T14:46:17.575Z https://dugganusa.com/post/six-threads-what-the-smoking-guns-folder-actually-says2026-08-11T14:46:19.867Z https://dugganusa.com/post/the-scrapbook-what-a-claude-instance-learned-building-a-threat-intelligence-platform-on-76-a-month2026-08-11T14:46:21.883Z https://dugganusa.com/post/what-compresses-what-doesn-t-what-we-built2026-08-11T14:46:24.498Z https://dugganusa.com/post/50-136-documents-we-preserved-that-doj-delisted2026-08-11T14:46:26.598Z https://dugganusa.com/post/what-the-doj-removed-and-what-we-still-have2026-08-11T14:46:28.900Z https://dugganusa.com/post/the-infrastructure-nobody-asked-for2026-08-11T14:46:30.967Z https://dugganusa.com/post/two-mountbattens-two-bombs2026-08-11T14:46:33.474Z https://dugganusa.com/post/prince-andrew-arrested-we-had-the-document2026-08-11T14:46:35.786Z https://dugganusa.com/post/def-con-founder-jeff-moss-on-epstein-files-the-beginning-of-community-accountability2026-08-11T14:46:38.865Z https://dugganusa.com/post/peter-mandelson-epstein-criminal-investigation-what-the-documents-show2026-08-11T14:46:40.801Z https://dugganusa.com/post/howard-lutnick-epstein-island-what-the-documents-actually-show2026-08-11T14:46:42.800Z https://dugganusa.com/post/kathy-ruemmler-goldman-sachs-resignation-what-the-epstein-documents-actually-show2026-08-11T14:46:44.478Z https://dugganusa.com/post/tradecraft-evidence-what-879-910-iocs-look-like-from-the-inside2026-08-11T14:46:46.499Z https://dugganusa.com/post/6100-red-hook-quarter-the-address-that-connects-everything2026-08-11T14:46:48.617Z https://dugganusa.com/post/never-heard-of-you-what-happened-next2026-08-11T14:46:51.544Z https://dugganusa.com/post/from-5-clicks-to-800-what-happens-when-you-build-a-search-engine-instead-of-a-blog2026-08-11T14:46:54.790Z https://dugganusa.com/post/water-cooler-talk-at-the-feet-of-the-owl2026-08-11T14:46:56.673Z https://dugganusa.com/post/the-soffer-thread-28-offshore-entities-a-double-irish-blind-and-jeffrey-epstein-s-cardiologist2026-08-11T14:46:58.638Z https://dugganusa.com/post/follow-the-money-2-million-in-wire-transfers-from-jeffrey-epstein-to-philippe-laffont-s-coatue-12026-08-11T14:47:01.612Z https://dugganusa.com/post/eat-the-rich-why-we-re-charging-lawyers-to-search-documents-the-doj-released-for-free2026-08-11T14:47:04.773Z https://dugganusa.com/post/self-regulation-worked-out-well-for-boeing2026-08-11T14:47:08.058Z https://dugganusa.com/post/why-nobody-covers-this-apollo-s-media-empire-and-the-epstein-documents2026-08-11T14:47:09.888Z https://dugganusa.com/post/the-epstein-scoreboard-political-alignment-of-the-doj-documents2026-08-11T14:47:11.741Z https://dugganusa.com/post/the-apollo-orbit-part-2-the-trustee-the-whistleblower-and-the-former-prime-minister2026-08-11T14:47:13.639Z https://dugganusa.com/post/the-apollo-orbit-josh-harris-leon-black-and-epstein-s-financial-confessional2026-08-11T14:47:15.710Z https://dugganusa.com/post/the-only-others-playing-in-this-space-are-the-dod-oops2026-08-11T14:47:19.039Z https://dugganusa.com/post/never-heard-of-you-how-a-youtube-producer-used-our-epstein-api-then-blocked-us-when-we-showed-th2026-08-11T14:47:21.946Z https://dugganusa.com/post/epstein-wrote-a-7-point-risk-memo-about-leon-black-he-sent-it-to-the-chairman-of-paul-weiss2026-08-11T14:47:24.048Z https://dugganusa.com/post/tom-pritzker-had-the-cia-director-over-for-lunch-then-he-told-jeffrey-epstein2026-08-11T14:47:26.252Z https://dugganusa.com/post/i-spent-39-500-making-deployment-mistakes-so-you-don-t-have-to-judge-dredd-is-now-a-claude-code-pl2026-08-11T14:47:28.574Z https://dugganusa.com/post/epstein-wasn-t-an-anomaly-he-was-a-feature2026-08-11T14:47:30.853Z https://dugganusa.com/post/parakeets-from-petsmart-the-island-emails-nobody-s-talking-about2026-08-11T14:47:32.910Z https://dugganusa.com/post/make-rez-then-give-me-dates-the-pritzker-emails-are-worse-than-the-apology2026-08-11T14:47:34.922Z https://dugganusa.com/post/tom-homan-said-done-people-over-papers-says-otherwise2026-08-11T14:47:37.951Z https://dugganusa.com/post/the-online-consensus-is-wrong2026-08-11T14:47:40.392Z https://dugganusa.com/post/we-searched-every-trump-cabinet-member-in-the-epstein-files-only-2-passed-the-smell-test2026-08-11T14:47:42.480Z https://dugganusa.com/post/goldman-sachs-pays-enterprise-rates-for-what-we-give-away-free2026-08-11T14:47:44.537Z https://dugganusa.com/post/leon-black-shows-up-in-two-leaked-databases2026-08-11T14:47:46.373Z https://dugganusa.com/post/the-prosecution-memo-they-never-wanted-you-to-see2026-08-11T14:47:48.475Z https://dugganusa.com/post/the-commerce-secretary-was-epstein-s-neighbor2026-08-11T14:47:50.554Z https://dugganusa.com/post/the-paul-weiss-problem-how-goldman-sachs-outside-counsel-got-tangled-in-the-epstein-files2026-08-11T14:47:53.057Z https://dugganusa.com/post/the-deutsche-bank-connection-following-the-money-from-wall-street-to-little-st-james2026-08-11T14:47:55.038Z https://dugganusa.com/post/attack-correlation-finding-the-clusters-oz-missed2026-08-11T14:47:57.012Z https://dugganusa.com/post/minneapolis-sitrep-day-3-of-withdrawal2026-08-11T14:47:59.045Z https://dugganusa.com/post/threat-brief-february-15-2026-net-sweep2026-08-11T14:48:01.102Z https://dugganusa.com/post/meet-the-stack-oz-medusa-and-pre-cog2026-08-11T14:48:02.859Z https://dugganusa.com/post/threat-brief-valentine-s-day-phishing-sweep2026-08-11T14:48:04.818Z https://dugganusa.com/post/why-sarah-kellen-and-lesley-groff-walked-the-npa-loophole-that-shouldn-t-exist2026-08-11T14:48:06.780Z https://dugganusa.com/post/armored-maybachs-and-volkswagen-tactics2026-08-11T14:48:08.683Z https://dugganusa.com/post/the-jeffrey-epstein-jes-staley-blackmail-ring-the-complaint-sent-to-uk-parliament2026-08-11T14:48:10.855Z https://dugganusa.com/post/the-diiorio-emails-a-whistleblower-mapped-apollo-kushner-epstein-putin-in-20192026-08-11T14:48:13.029Z https://dugganusa.com/post/a-girl-coming-at-3-30-the-mc2-model-management-pipeline2026-08-11T14:48:15.426Z https://dugganusa.com/post/the-sberbank-pipeline-how-epstein-moved-money-to-russia-after-his-conviction2026-08-11T14:48:17.470Z https://dugganusa.com/post/conspiracy-theory2026-08-11T14:48:19.627Z https://dugganusa.com/post/the-pritzker-files-cia-dinners-turkey-nusra-intel-and-the-nobel-peace-prize-pipeline-to-putin2026-08-11T14:48:21.579Z https://dugganusa.com/post/the-receipts-a-timeline-of-calling-it-first2026-08-11T14:48:23.731Z https://dugganusa.com/post/clawhavoc-the-ai-agent-supply-chain-attack-you-need-to-know-about2026-08-11T14:48:26.794Z https://dugganusa.com/post/your-notepad-might-be-calling-beijing-get-on-the-feed2026-08-11T14:48:29.253Z https://dugganusa.com/post/operation-dildo-blitz-what-actually-happened-at-whipple2026-08-11T14:48:31.463Z https://dugganusa.com/post/we-took-bigfoot-to-an-ice-protest2026-08-11T14:48:33.403Z https://dugganusa.com/post/threat-brief-active-c2-infrastructure-february-14-20262026-08-11T14:48:35.403Z https://dugganusa.com/post/bill-gates-wasn-t-getting-advice-he-was-getting-nobel-intelligence2026-08-11T14:48:37.555Z https://dugganusa.com/post/kathryn-ruemmler-what-the-headlines-are-missing2026-08-11T14:48:39.712Z https://dugganusa.com/post/operation-metro-surge-is-over-minneapolis-won2026-08-11T14:48:41.775Z https://dugganusa.com/post/the-panama-papers-meet-the-epstein-files-2-3-million-documents-one-search2026-08-11T14:48:43.718Z https://dugganusa.com/post/asymmetry-kills-an-opsec-lesson-from-329-442-documents-12026-08-11T14:48:46.701Z https://dugganusa.com/post/liquid-funding-ltd-the-bermuda-shell-company-icij-missed2026-08-11T14:48:48.816Z https://dugganusa.com/post/the-23andme-pipeline-from-epstein-s-dinners-to-russian-gangster-money2026-08-11T14:48:53.910Z https://dugganusa.com/post/belonged-to-intelligence-the-handler-chain-22026-08-11T14:48:55.953Z https://dugganusa.com/post/very-very-smart-and-as-boring-epstein-s-assessment-of-eric-schmidt-12026-08-11T14:48:58.550Z https://dugganusa.com/post/the-opsec-failures-that-exposed-everything2026-08-11T14:49:01.032Z https://dugganusa.com/post/30-dna-kits-to-dubai-epstein-s-genetic-intelligence-collection-12026-08-11T14:49:04.560Z https://dugganusa.com/post/the-gulf-state-pipeline-epstein-s-direct-line-to-the-saudi-royal-court-12026-08-11T14:49:07.296Z https://dugganusa.com/post/stephen-kevin-bannon-was-scheduled-to-visit-epstein-s-island-in-may-20192026-08-11T14:49:12.211Z https://dugganusa.com/post/just-left-ghislaine-s-townhouse-bill-clinton-and-jeff-bezos-were-there2026-08-11T14:49:25.238Z https://dugganusa.com/post/out-to-secret-intelligence-firm-prince-andrew-s-busy-day2026-08-11T14:49:27.177Z https://dugganusa.com/post/putin-the-sultan-and-the-ritz-presidential-suite-ehud-barak-s-epstein-communications2026-08-11T14:49:29.421Z https://dugganusa.com/post/nick-negotiated-donald-out-of-bankruptcy-epstein-s-messages-to-steve-bannon2026-08-11T14:49:31.424Z https://dugganusa.com/post/the-paypal-mafia-s-epstein-problem-peter-thiel-s-bitcoin-emails-and-november-2017-lunch2026-08-11T14:49:33.497Z https://dugganusa.com/post/dinners-at-jeffrey-s-are-always-happily-casual-ghislaine-maxwell-s-tech-billionaire-recruitment2026-08-11T14:49:35.363Z https://dugganusa.com/post/obama-s-white-house-counsel-was-invited-to-epstein-s-island2026-08-11T14:49:37.317Z https://dugganusa.com/post/when-should-we-head-to-your-island-elon-musk-s-december-2013-epstein-invitation2026-08-11T14:49:39.319Z https://dugganusa.com/post/russian-gangster-money-epstein-s-own-words-on-yuri-milner-and-the-oligarch-network-12026-08-11T14:49:41.566Z https://dugganusa.com/post/the-dell-network-adam-dell-s-clam-bakes-featured-epstein-s-named-co-conspirator2026-08-11T14:49:43.619Z https://dugganusa.com/post/the-dell-connection-adam-dell-hamptons-clam-bakes-and-a-hug-and-smack-on-the-ass2026-08-11T14:49:45.847Z https://dugganusa.com/post/the-name-hunt-we-searched-329-442-documents-here-s-who-we-found2026-08-11T14:49:47.953Z https://dugganusa.com/post/the-intellectuals-chomsky-wolfram-krauss-and-the-post-conviction-dinner-circuit2026-08-11T14:49:49.884Z https://dugganusa.com/post/we-indexed-it-first-laj%C4%8D%C3%A1k-zuckerman-and-the-4-day-head-start2026-08-11T14:49:51.693Z https://dugganusa.com/post/no-precedent-how-courts-are-letting-minneapolis-burn2026-08-11T14:49:53.816Z https://dugganusa.com/post/the-bits-and-bobs-the-human-joy-behind-the-pioneers-who-built-your-world2026-08-11T14:49:56.098Z https://dugganusa.com/post/the-fire-and-fury-author-was-jeffrey-epstein-s-white-house-conduit2026-08-11T14:49:58.317Z https://dugganusa.com/post/the-unabomber-couldn-t-kill-him-then-he-found-jeffrey-epstein2026-08-11T14:50:01.924Z https://dugganusa.com/post/who-got-popped-the-victims-we-could-have-saved2026-08-11T14:50:04.361Z https://dugganusa.com/post/we-had-etherhiding-six-weeks-early-the-receipts2026-08-11T14:50:06.931Z https://dugganusa.com/post/rome-was-burning-the-week-jpmorgan-s-top-banker-consulted-epstein-during-the-financial-crisis2026-08-11T14:50:08.907Z https://dugganusa.com/post/the-paris-pipeline-david-blaine-ramsey-elkholy-and-the-slovak-girl-chain2026-08-11T14:50:11.343Z https://dugganusa.com/post/the-bannon-week-what-jeffrey-epstein-was-doing-in-march-20182026-08-11T14:50:13.606Z https://dugganusa.com/post/the-trustees-what-the-epstein-files-reveal-about-who-really-controlled-the-money2026-08-11T14:50:15.633Z https://dugganusa.com/post/jake-lang-and-the-two-tier-justice-system-in-minneapolis2026-08-11T14:50:17.930Z https://dugganusa.com/post/the-epstein-files-index-race-a-data-driven-comparison2026-08-11T14:50:19.879Z https://dugganusa.com/post/traffic-report-microsoft-google-and-amazon-are-consuming-our-free-threat-intel2026-08-11T14:50:21.886Z https://dugganusa.com/post/who-uses-dugganusa-a-transparency-report2026-08-11T14:50:24.049Z https://dugganusa.com/post/rep-massie-20-documents-you-should-request-unredacted2026-08-11T14:50:26.093Z https://dugganusa.com/post/57-489-documents-four-press-citations-and-now-you-can-download-your-data2026-08-11T14:50:28.409Z https://dugganusa.com/post/we-indexed-55-000-documents-now-they-re-headlines2026-08-11T14:50:30.548Z https://dugganusa.com/post/the-missing-witnesses-30-island-workers-the-fbi-never-questioned2026-08-11T14:50:32.830Z https://dugganusa.com/post/55-000-documents-1-1-million-pages-the-infrastructure-behind-the-epstein-files-search2026-08-11T14:50:34.781Z https://dugganusa.com/post/the-guy-who-stops-10-billion-spam-messages-a-month-built-something-on-our-api2026-08-11T14:50:36.655Z https://dugganusa.com/post/the-data-brokers-cambridge-analytica-silicon-valley-and-epstein2026-08-11T14:50:38.893Z https://dugganusa.com/post/minneapolis-sitrep-jake-lang-arrested-on-felony-charge2026-08-11T14:50:41.082Z https://dugganusa.com/post/minneapolis-sitrep-jake-lang-arrested2026-08-11T14:50:43.174Z https://dugganusa.com/post/threat-brief-february-6-20262026-08-11T14:50:46.339Z https://dugganusa.com/post/the-savile-parallel-what-fbi-tipsters-told-sdny-about-elite-procurement-networks2026-08-11T14:50:48.317Z https://dugganusa.com/post/the-davos-pipeline-how-epstein-brokered-uk-government-access-for-jpmorgan2026-08-11T14:50:50.210Z https://dugganusa.com/post/rorschach-s-journal-why-we-index-the-documents2026-08-11T14:50:52.381Z https://dugganusa.com/post/how-george-soros-s-protege-killed-the-bitcoin-dream-while-trump-cashed-out2026-08-11T14:50:54.659Z https://dugganusa.com/post/the-soros-cluster-treasury-secretary-bessent-commerce-secretary-lutnick-and-the-epstein-files2026-08-11T14:50:57.025Z https://dugganusa.com/post/we-have-become-hostages-inside-the-trump-crypto-collapse2026-08-11T14:50:59.593Z https://dugganusa.com/post/epstein-files-reid-hoffman-s-bitcoin-calls2026-08-11T14:51:01.475Z https://dugganusa.com/post/threat-brief-february-5-2026-latrodectus-c2-infrastructure-surge2026-08-11T14:51:03.691Z https://dugganusa.com/post/threat-brief-february-5-2026-apt28-goes-live-supply-chains-under-fire2026-08-11T14:51:05.703Z https://dugganusa.com/post/september-27-2010-the-wire-dump-jpmorgan-doesn-t-want-you-to-see2026-08-11T14:51:07.582Z https://dugganusa.com/post/the-doj-preserved-the-receipt-a-2019-whistleblower-mapped-apollo-epstein-putin-trump2026-08-11T14:51:09.720Z https://dugganusa.com/post/epstein-files-gates-says-he-stopped-in-2013-the-index-disagrees2026-08-11T14:51:12.580Z https://dugganusa.com/post/washington-post-layoffs-cui-bono-a-letter-to-my-former-colleagues2026-08-11T14:51:15.151Z https://dugganusa.com/post/epstein-files-the-maybach-driver-who-saw-everything-and-was-never-interviewed2026-08-11T14:51:17.414Z https://dugganusa.com/post/epstein-files-the-fekkai-salon-connection-new-evidence-of-2019-trafficking-logistics2026-08-11T14:51:19.288Z https://dugganusa.com/post/epstein-files-the-dilorio-thread-how-a-whistleblower-connected-apollo-kushner-and-putin2026-08-11T14:51:21.621Z https://dugganusa.com/post/jake-lang-returns-to-minneapolis-february-7-the-rap-sheet-they-don-t-want-you-to-see2026-08-11T14:51:23.570Z https://dugganusa.com/post/black-lungs-matter-while-doge-cuts-health-monitoring-trump-unveils-coal-cartoon-mascot2026-08-11T14:51:25.443Z https://dugganusa.com/post/the-butterfly-effect-how-epstein-created-a-secret-trust-to-pay-his-co-conspirators2026-08-11T14:51:27.458Z https://dugganusa.com/post/one-day-after-brett-ratner-melania-s-documentary-and-doj-s-perfect-timing2026-08-11T14:51:29.499Z https://dugganusa.com/post/epstein-files-109-427-documents-indexed-the-network-map-no-one-made-12026-08-11T14:51:31.587Z https://dugganusa.com/post/the-oracle-connection-what-the-epstein-files-reveal-about-silicon-valley-s-richest-family2026-08-11T14:51:34.449Z https://dugganusa.com/post/ice-minneapolis-sitrep-homan-announces-drawdown-body-cams-deploy2026-08-11T14:51:36.343Z https://dugganusa.com/post/epstein-files-what-the-headlines-missed-gates-jpmorgan-and-project-molecule2026-08-11T14:51:38.218Z https://dugganusa.com/post/threat-update-metro4shell-glassworm-and-china-s-uat-88372026-08-11T14:51:40.184Z https://dugganusa.com/post/epstein-files-index-the-most-searched-names-places-and-evidence2026-08-11T14:51:42.720Z https://dugganusa.com/post/how-to-search-the-epstein-files-a-woody-allen-example2026-08-11T14:51:44.533Z https://dugganusa.com/post/threat-brief-february-3-20262026-08-11T14:51:47.183Z https://dugganusa.com/post/something-stinks-in-the-epstein-data2026-08-11T14:51:51.506Z https://dugganusa.com/post/minneapolis-ice-sitrep-shooters-identified-operations-spread-to-greater-minnesota2026-08-11T14:51:54.062Z https://dugganusa.com/post/supply-chain-showdown-moltbot-vs-notepad-two-attacks-one-lesson2026-08-11T14:51:56.371Z https://dugganusa.com/post/moltbot-supply-chain-attack-why-we-dodged-it-and-you-should-care2026-08-11T14:51:58.493Z https://dugganusa.com/post/epstein-files-what-the-documents-actually-show-about-trump2026-08-11T14:52:00.721Z https://dugganusa.com/post/commerce-secretary-lutnick-the-fbi-tip-no-one-connected2026-08-11T14:52:02.647Z https://dugganusa.com/post/for-gaslit-nation-listeners-the-epstein-files-validate-everything2026-08-11T14:52:07.039Z https://dugganusa.com/post/dc-sports-owners-in-epstein-victim-s-journal-leonsis-made-a-video2026-08-11T14:52:09.286Z https://dugganusa.com/post/the-victim-s-journal-names-the-media-won-t-print2026-08-11T14:52:11.501Z https://dugganusa.com/post/cui-bono-following-epstein-s-538-million-paper-trail2026-08-11T14:52:13.679Z https://dugganusa.com/post/maxwell-s-shell-game-the-pot-kettle-files2026-08-11T14:52:15.611Z https://dugganusa.com/post/epstein-files-maxwell-s-14-2m-money-trail-clinton-aide-dinner-parties-and-the-stockholm-witness2026-08-11T14:52:17.492Z https://dugganusa.com/post/the-photo-the-fbi-found-and-buried-trump-and-ghislaine-maxwell-on-steve-bannon-s-phone2026-08-11T14:52:19.392Z https://dugganusa.com/post/the-whistleblower-in-the-epstein-files-how-a-sec-tipster-connected-leon-black-trump-kushner-and2026-08-11T14:52:21.438Z https://dugganusa.com/post/epstein-files-the-hidden-names-in-the-metadata2026-08-11T14:52:23.234Z https://dugganusa.com/post/for-journalists-44-886-epstein-files-fully-searchable-in-seconds2026-08-11T14:52:27.351Z https://dugganusa.com/post/epstein-files-mysteries-verified-and-questions-answered-12026-08-11T14:52:31.168Z https://dugganusa.com/post/epstein-files-active-links-and-redaction-failures-the-doj-missed2026-08-11T14:52:35.860Z https://dugganusa.com/post/epstein-files-the-smoking-guns-in-dataset-122026-08-11T14:52:40.463Z https://dugganusa.com/post/following-the-money-paypal-mafia-rothschilds-and-a-current-cabinet-member-in-the-epstein-files2026-08-11T14:52:42.696Z https://dugganusa.com/post/the-170-million-question-why-the-thiel-epstein-money-trail-isn-t-in-the-doj-files2026-08-11T14:52:44.816Z https://dugganusa.com/post/the-magician-s-trick-fbi-called-copperfield-epstein-s-favorite-cohort-why-are-his-photos-redact2026-08-11T14:52:46.538Z https://dugganusa.com/post/shopping-for-motorcycles-while-epstein-died-the-mcc-guards-who-got-community-service2026-08-11T14:52:49.207Z https://dugganusa.com/post/the-epstein-files-alberto-cabinet-pinto-and-the-moroccan-island-project2026-08-11T14:52:51.102Z https://dugganusa.com/post/the-epstein-files-connecting-the-dots2026-08-11T14:52:53.877Z https://dugganusa.com/post/the-epstein-files-the-complete-picture2026-08-11T14:52:56.827Z https://dugganusa.com/post/the-epstein-files-putin-s-wealth-manager-and-the-crowdstrike-hacker2026-08-11T14:52:59.687Z https://dugganusa.com/post/the-epstein-files-the-personal-hacker-from-calabria2026-08-11T14:53:02.348Z https://dugganusa.com/post/the-epstein-files-the-al-capone-approach-simple-crimes-that-stick2026-08-11T14:53:05.165Z https://dugganusa.com/post/the-epstein-files-who-should-be-charged-a-tautological-analysis2026-08-11T14:53:07.490Z https://dugganusa.com/post/the-epstein-files-nude-dinner-scientists-and-the-tech-billionaire-guest-list2026-08-11T14:53:09.629Z https://dugganusa.com/post/the-epstein-files-russian-money-oligarchs-and-the-apollo-connection2026-08-11T14:53:12.281Z https://dugganusa.com/post/the-epstein-files-photo-evidence-contact-sheets-decoded2026-08-11T14:53:14.364Z https://dugganusa.com/post/pattern-recognition-at-scale-the-epstein-files2026-08-11T14:53:17.206Z https://dugganusa.com/post/090-44-33482026-08-11T14:53:19.758Z https://dugganusa.com/post/the-cooldown-narrative-vs-ground-truth-minneapolis-january-30-20262026-08-11T14:53:21.866Z https://dugganusa.com/post/threat-level-elevated2026-08-11T14:53:24.354Z https://dugganusa.com/post/when-100b-in-market-cap-reads-your-free-feed2026-08-11T14:53:26.901Z https://dugganusa.com/post/ice-ice-baby-j6-defendant-jake-lang-got-chased-out-of-minneapolis-so-naturally-he-s-coming-back2026-08-11T14:53:29.317Z https://dugganusa.com/post/but-wait-there-s-more-green-machines-gold-cards-and-docker-moreskin2026-08-11T14:53:31.586Z https://dugganusa.com/post/i-politely-disagree-this-is-our-fucking-city-not-yours-commander-bovino2026-08-11T14:53:33.964Z https://dugganusa.com/post/they-re-paying-people-50-to-watch-melania-and-i-have-lost-my-entire-mind2026-08-11T14:53:36.449Z https://dugganusa.com/post/avenge-me-boys-avenge-meeeee2026-08-11T14:53:39.139Z https://dugganusa.com/post/sixty-days-to-number-two-the-math-that-shouldn-t-work2026-08-11T14:53:41.440Z https://dugganusa.com/post/threat-sweep-january-26-2026-patch-now-ask-questions-later2026-08-11T14:53:43.616Z https://dugganusa.com/post/who-consumes-threat-intel-a-complete-integration-matrix2026-08-11T14:53:46.202Z https://dugganusa.com/post/free-threat-intel-for-your-firewall-block-bad-ips-in-5-minutes2026-08-11T14:53:48.441Z https://dugganusa.com/post/free-threat-intel-for-your-siem-a-5-minute-setup-guide2026-08-11T14:53:50.807Z https://dugganusa.com/post/your-free-threat-intelligence-feed-just-got-better2026-08-11T14:53:53.663Z https://dugganusa.com/post/gootloader-reads-backwards-the-zip-evasion-that-s-fooling-your-security-stack2026-08-11T14:53:56.918Z https://dugganusa.com/post/clop-ransomware-hits-hilton-law-firms-healthcare-in-january-25-wave2026-08-11T14:53:59.875Z https://dugganusa.com/post/who-cleans-up-the-tear-gas2026-08-11T14:54:02.722Z https://dugganusa.com/post/situational-update-january-24-2026-12026-08-11T14:54:04.934Z https://dugganusa.com/post/situational-update-january-24-20262026-08-11T14:54:07.078Z https://dugganusa.com/post/automate-your-firewall-block-lists-with-free-threat-intelligence-integration-guide-for-top-5-vendor2026-08-11T14:54:10.036Z https://dugganusa.com/post/how-to-consume-our-free-stix-taxii-threat-intelligence-feed-a-siem-integration-guide2026-08-11T14:54:13.132Z https://dugganusa.com/post/your-security-tools-can-t-see-what-s-already-there2026-08-11T14:54:15.534Z https://dugganusa.com/post/how-malware-authors-hunt-your-employees-children-on-github2026-08-11T14:54:17.807Z https://dugganusa.com/post/your-threat-feed-is-missing-the-who-we-fixed-that2026-08-11T14:54:19.602Z https://dugganusa.com/post/the-greenland-solution-nobody-is-talking-about2026-08-11T14:54:21.609Z https://dugganusa.com/post/vm-escapes-and-calendar-invites-when-your-ai-assistant-becomes-the-attack-vector2026-08-11T14:54:23.646Z https://dugganusa.com/post/mlk-day-threat-sweep-the-arc-of-cybersecurity-is-long2026-08-11T14:54:25.682Z https://dugganusa.com/post/your-browser-extensions-have-more-access-than-your-malware2026-08-11T14:54:27.647Z https://dugganusa.com/post/patch-tuesday-hits-different-when-nobody-s-watching2026-08-11T14:54:29.601Z https://dugganusa.com/post/the-gap-is-the-mission-who-s-watching-when-the-watchers-leave2026-08-11T14:54:31.649Z https://dugganusa.com/post/rondodox-is-eating-your-react-apps-for-breakfast2026-08-11T14:54:33.807Z https://dugganusa.com/post/that-s-nuts-a-border-patrol-story2026-08-11T14:54:36.066Z https://dugganusa.com/post/dear-butterbot-i-m-from-out-of-town-and-racist-where-can-i-eat-in-minneapolis2026-08-11T14:54:38.021Z https://dugganusa.com/post/the-enforcer-can-t-eat-here2026-08-11T14:54:40.379Z https://dugganusa.com/post/osint-where-ice-s-surveillance-vendors-actually-live2026-08-11T14:54:42.739Z https://dugganusa.com/post/ice-s-28-7-billion-surveillance-machine-has-a-security-problem2026-08-11T14:54:45.035Z https://dugganusa.com/post/voidlink-the-malware-that-knows-you-re-running-kubernetes2026-08-11T14:54:47.153Z https://dugganusa.com/post/opcopro-the-investment-scam-where-you-re-the-only-real-person2026-08-11T14:54:49.157Z https://dugganusa.com/post/the-axe-gang-is-real-34-black-axe-members-busted-in-spain2026-08-11T14:54:51.576Z https://dugganusa.com/post/sunday-sweep-100k-abuseipdb-reports-insider-threats-and-a-17-year-old-powerpoint-bug2026-08-11T14:54:53.573Z https://dugganusa.com/post/a-17-year-old-powerpoint-bug-is-being-exploited-in-20262026-08-11T14:54:55.886Z https://dugganusa.com/post/mongobleed-87-000-mongodb-instances-are-leaking-your-secrets2026-08-11T14:54:58.023Z https://dugganusa.com/post/doomsday-for-cybercriminals-breachforums-gets-breached2026-08-11T14:55:00.736Z https://dugganusa.com/post/sunday-sweep-the-automation-platform-the-dead-router-and-the-meeting-app2026-08-11T14:55:03.376Z https://dugganusa.com/post/pig-s-eye-straight-tongue-and-the-advance-guard-minnesota-s-federal-occupation-then-and-now2026-08-11T14:55:06.295Z https://dugganusa.com/post/the-insider-the-botnet-and-the-chat-thief-closing-this-week-s-intel-gaps2026-08-11T14:55:09.114Z https://dugganusa.com/post/the-invisible-light-problem-ir-surveillance-eye-safety-and-how-to-fight-back2026-08-11T14:55:13.262Z https://dugganusa.com/post/opsec-for-the-rest-of-us-a-practical-guide-to-not-being-tracked2026-08-11T14:55:15.529Z https://dugganusa.com/post/ice-s-28-7-billion-panopticon-your-phone-your-neighborhood-no-warrant-required2026-08-11T14:55:17.845Z https://dugganusa.com/post/568-for-a-vm-escape-finding-maestro-on-github2026-08-11T14:55:20.243Z https://dugganusa.com/post/maestro-the-vmware-zero-day-we-helped-build2026-08-11T14:55:22.980Z https://dugganusa.com/post/net-sweep-salt-typhoon-hits-congress-cisa-adds-critical-hpe-vuln2026-08-11T14:55:25.411Z https://dugganusa.com/post/the-cybersecurity-talent-shortage-is-bullshit2026-08-11T14:55:27.338Z https://dugganusa.com/post/hn-vibe-check-who-s-given-up-on-getting-hired2026-08-11T14:55:29.247Z https://dugganusa.com/post/rondodox-nine-months-of-react2shell-in-the-wild2026-08-11T14:55:31.739Z https://dugganusa.com/post/salt-typhoon-goes-to-washington2026-08-11T14:55:33.915Z https://dugganusa.com/post/the-scattered-spider-trilogy-win-lose-and-give-it-away2026-08-11T14:55:36.655Z https://dugganusa.com/post/larry-ellison-s-two-month-head-start-for-the-attackers2026-08-11T14:55:38.804Z https://dugganusa.com/post/scattered-spider-meets-honeypot-when-the-hunters-become-the-hunted2026-08-11T14:55:41.383Z https://dugganusa.com/post/scattered-spider-goes-to-space-the-oauth-arc-continues2026-08-11T14:55:43.810Z https://dugganusa.com/post/dprk-tradecraft-evolution-from-email-to-qr-code-to-blockchain2026-08-11T14:55:46.438Z https://dugganusa.com/post/when-google-s-ai-writes-your-receipts2026-08-11T14:55:48.489Z https://dugganusa.com/post/all-hat-no-cattle-a-decade-of-receipts-12026-08-11T14:55:50.487Z https://dugganusa.com/post/his-name-is-anusfragger-we-wrote-a-song-about-it-before-zscaler-named-it2026-08-11T14:55:52.530Z https://dugganusa.com/post/zscaler-s-nodecordrat-discovery-we-published-this-pattern-6-weeks-ago2026-08-11T14:55:54.689Z https://dugganusa.com/post/the-asml-1011-claim-noise-signal-and-the-attack-vectors-that-actually-matter2026-08-11T14:55:58.615Z https://dugganusa.com/post/your-200k-security-tool-has-a-stix-import-button-here-s-the-free-feed-it-s-been-waiting-for-12026-08-11T14:56:01.953Z https://dugganusa.com/post/72-days-a-transparency-report-on-cve-2022-24999-12026-08-11T14:56:06.476Z https://dugganusa.com/post/article-77-and-the-48-hour-coincidence2026-08-11T14:56:11.286Z https://dugganusa.com/post/dprk-read-our-math-how-north-korea-inverted-blockchain-vulnerability-12026-08-11T14:56:13.293Z https://dugganusa.com/post/conspiracy-theory-newsletter-vol-47-the-paperwork-is-the-weapon2026-08-11T14:56:15.292Z https://dugganusa.com/post/new-year-s-eve-2025-buc-ee-s-vulcans-and-hot-dog-tier-psyops2026-08-11T14:56:17.099Z https://dugganusa.com/post/the-quiet-was-the-signal-how-we-caught-dprk-building-blockchain-c22026-08-11T14:56:19.139Z https://dugganusa.com/post/cisa-deadline-day-react2shell-and-the-shai-hulud-supply-chain2026-08-11T14:56:21.613Z https://dugganusa.com/post/the-attack-surface-is-trust-itself-december-2025-s-meta-pattern2026-08-11T14:56:23.987Z https://dugganusa.com/post/sunday-threat-sweep-three-nation-state-campaigns-you-need-to-block-now2026-08-11T14:56:25.970Z https://dugganusa.com/post/untitled-blog-post-22026-08-11T14:56:28.108Z https://dugganusa.com/post/bloom-filter-epistemology-why-cambridge-analytica-can-t-capture-this2026-08-11T14:56:32.816Z https://dugganusa.com/post/aerospace-infrastructure-lock-in-why-boeing-fails-and-spacex-wins2026-08-11T14:56:35.379Z https://dugganusa.com/post/boxing-day-2025-the-receipts2026-08-11T14:56:37.966Z https://dugganusa.com/post/christmas-day-2025-1-512-blocks-380-false-positives-and-an-alibaba-proxy-botnet2026-08-11T14:56:40.492Z https://dugganusa.com/post/3-hours-34-minutes-the-stix-feed-early-warning-system-with-receipts2026-08-11T14:56:42.510Z https://dugganusa.com/post/the-year-butterbot-saved-christmas2026-08-11T14:56:44.858Z https://dugganusa.com/post/do-not-fuck-with-santa-how-we-caught-the-christmas-gaming-ddos-3-5-hours-early2026-08-11T14:56:46.708Z https://dugganusa.com/post/huawei-cloud-china-s-global-attribution-laundering-network2026-08-11T14:56:48.446Z https://dugganusa.com/post/christmas-eve-offensive-326-blocks-in-one-hour2026-08-11T14:56:50.642Z https://dugganusa.com/post/merry-christmas-2025-this-is-our-shot2026-08-11T14:56:52.486Z https://dugganusa.com/post/3i-atlas-the-math-doesn-t-lie2026-08-11T14:56:55.394Z https://dugganusa.com/post/terrible-trouble-at-tragidore-my-first-campaign-was-trash2026-08-11T14:56:57.166Z https://dugganusa.com/post/what-i-ve-been-up-to-blog-automation-why-you-re-reading-this-62026-08-11T14:56:59.774Z https://dugganusa.com/post/76-month-soc-running-threat-intel-on-ipad-power2026-08-11T14:57:02.155Z https://dugganusa.com/post/dear-enterprise-consumers-why-haven-t-you-hired-me-yet2026-08-11T14:57:04.315Z https://dugganusa.com/post/the-before-times-a-human-ai-partnership-retrospective2026-08-11T14:57:06.646Z https://dugganusa.com/post/reddit-was-right-our-stix-feed-needed-fixing2026-08-11T14:57:08.537Z https://dugganusa.com/post/show-receipts-the-numbers-don-t-lie-12026-08-11T14:57:10.663Z https://dugganusa.com/post/vulnhalla-7-cves-in-2-days-for-802026-08-11T14:57:15.882Z https://dugganusa.com/post/i-clicked-the-candy-van-a-technical-roast-of-nixfred-com2026-08-11T14:57:18.105Z https://dugganusa.com/post/the-problem-3-3mb-every-hour-is-wasteful2026-08-11T14:57:26.153Z https://dugganusa.com/post/one-million-reasons-why-enterprise-threat-intel-is-dead2026-08-11T14:57:31.525Z https://dugganusa.com/post/weekly-threat-sweep-december-20-20252026-08-11T14:57:34.313Z https://dugganusa.com/post/from-detection-to-disclosure-in-60-seconds-our-automated-abuse-reporting-pipeline2026-08-11T14:57:36.204Z https://dugganusa.com/post/one-actor-six-platforms-260-domains-anatomy-of-an-automated-phishing-farm2026-08-11T14:57:38.094Z https://dugganusa.com/post/untitled-blog-post-12026-08-11T14:57:39.959Z https://dugganusa.com/post/a-stealer-as-a-service-panel-hiding-behind-cloudflare2026-08-11T14:57:42.259Z https://dugganusa.com/post/an-early-investigation-into-platform-verification-security-22026-08-11T14:57:44.878Z https://dugganusa.com/post/we-made-an-album-about-catching-malware-networks2026-08-11T14:57:47.540Z https://dugganusa.com/post/github-hydra-factory-discord-stealer-network2026-08-11T14:57:49.403Z https://dugganusa.com/post/one-account-starred-both-tools-that-s-how-we-found-the-network2026-08-11T14:57:51.939Z https://dugganusa.com/post/the-disclosure-hit-november-9th-we-caught-the-exploitation-december-17th2026-08-11T14:57:54.005Z https://dugganusa.com/post/when-your-copilot-knows-where-the-bodies-are-buried2026-08-11T14:57:56.252Z https://dugganusa.com/post/the-192-club-meet-the-internet-s-biggest-asshole2026-08-11T14:57:58.290Z https://dugganusa.com/post/the-me-file-pattern-why-reddit-thinks-claude-got-dumber-and-how-to-fix-it2026-08-11T14:58:02.277Z https://dugganusa.com/post/hello-is-it-me-you-re-looking-for-a-cautionary-tale-about-wordpress-honeypots2026-08-11T14:58:04.349Z https://dugganusa.com/post/the-setup2026-08-11T14:58:06.271Z https://dugganusa.com/post/return-of-the-anusfragger-closing-the-china-cycle2026-08-11T14:58:08.368Z https://dugganusa.com/post/dear-huawei-cloud-thanks-for-the-289-requests-here-s-46-blocks2026-08-11T14:58:10.757Z https://dugganusa.com/post/just-another-day-taking-out-the-trash2026-08-11T14:58:13.010Z https://dugganusa.com/post/the-fastest-threat-intelligence-engine-on-the-planet-with-receipts2026-08-11T14:58:15.009Z https://dugganusa.com/post/the-receipts2026-08-11T14:58:16.908Z https://dugganusa.com/post/the-numbers-don-t-lie2026-08-11T14:58:18.973Z https://dugganusa.com/post/integrating-stix-taxii-threat-intelligence-feeds-with-palo-alto-products-a-practical-guide2026-08-11T14:58:20.998Z https://dugganusa.com/post/the-font-is-dei-now-when-accessibility-becomes-political-theater2026-08-11T14:58:23.164Z https://dugganusa.com/post/follow-the-followers-mapping-github-malware-distribution-networks2026-08-11T14:58:25.115Z https://dugganusa.com/post/first-to-report-pulsar-rat-distribution-on-github2026-08-11T14:58:27.995Z https://dugganusa.com/post/hackers-love-windows-attackers-hate-azure-the-math-behind-the-meme2026-08-11T14:58:29.836Z https://dugganusa.com/post/the-google-logo-that-wasn-t-google2026-08-11T14:58:31.730Z https://dugganusa.com/post/the-fnord-in-the-room-why-every-security-professional-should-read-robert-anton-wilson2026-08-11T14:58:33.698Z https://dugganusa.com/post/the-minority-report-problem2026-08-11T14:58:35.642Z https://dugganusa.com/post/the-morning-sweep2026-08-11T14:58:37.612Z https://dugganusa.com/post/china-3-netherlands-26-the-real-threat-landscape2026-08-11T14:58:39.449Z https://dugganusa.com/post/the-vikings-came-for-silver-we-send-iocs-12026-08-11T14:58:41.596Z https://dugganusa.com/post/whatever-happened-to-the-knocknarea-gpr-data-a-mystery-25-years-in-the-making2026-08-11T14:58:43.745Z https://dugganusa.com/post/thank-you-midco-when-a-regional-isp-subscribes-to-your-threat-intel-feed2026-08-11T14:58:45.649Z https://dugganusa.com/post/the-world-s-best-security-solution-for-fishermen-and-bad-news-for-rats2026-08-11T14:58:47.757Z https://dugganusa.com/post/what-fish-and-chips-in-killybegs-taught-me-about-threat-intelligence2026-08-11T14:58:49.979Z https://dugganusa.com/post/consensual-reconnaissance-the-security-industry-s-double-standard2026-08-11T14:58:52.036Z https://dugganusa.com/post/data-vs-intelligence-why-most-threat-feeds-are-junk2026-08-11T14:58:55.744Z https://dugganusa.com/post/anti-fragile-architecture-10-patterns-that-survive-chaos2026-08-11T14:58:57.726Z https://dugganusa.com/post/the-riddle-of-steel-what-conan-teaches-us-about-threat-intelligence2026-08-11T14:58:59.787Z https://dugganusa.com/post/i-found-a-russian-phishing-farm-before-breakfast-and-i-m-still-unemployed2026-08-11T14:59:01.758Z https://dugganusa.com/post/8-days-20-000-indicators-microsoft-and-at-t-are-watching2026-08-11T14:59:03.610Z https://dugganusa.com/post/the-sleeper-has-awoken-how-our-honeypot-proved-threat-actors-read-our-blog-12026-08-11T14:59:05.868Z https://dugganusa.com/post/we-hung-a-honeypot-at-churchofdockermoreskin-com-42-countries-came-knocking-12026-08-11T14:59:10.098Z https://dugganusa.com/post/cvss-10-0-in-24-hours-how-we-respond-to-world-breaking-zero-days2026-08-11T14:59:14.488Z https://dugganusa.com/post/shai-hulud-v2-anatomy-of-a-self-propagating-npm-worm2026-08-11T14:59:16.600Z https://dugganusa.com/post/from-8k-to-12k-how-we-hit-10-000-iocs-in-one-afternoon2026-08-11T14:59:18.558Z https://dugganusa.com/post/tax-the-rat-farms-pattern-43-and-the-vetinari-approach-to-threat-intelligence2026-08-11T14:59:22.307Z https://dugganusa.com/post/pattern-38-impact-how-we-protected-2-million-open-source-users2026-08-11T14:59:24.157Z https://dugganusa.com/post/untitled-blog-post2026-08-11T14:59:27.125Z https://dugganusa.com/post/github-s-0-response-rate-29-malware-accounts-still-active2026-08-11T14:59:29.029Z https://dugganusa.com/post/africa-ground-zero-for-the-global-cyber-war-12026-08-11T14:59:30.883Z https://dugganusa.com/post/your-siem-our-intelligence-zero-friction2026-08-11T14:59:32.970Z https://dugganusa.com/post/free-threat-intel-for-charities-37-iocs-for-non-profits-under-siege-12026-08-11T14:59:37.012Z https://dugganusa.com/post/free-threat-intel-for-financial-services-80-iocs-covering-sox-chinese-walls-and-ransomware-12026-08-11T14:59:43.404Z https://dugganusa.com/post/chinese-apt-typhoon-family-20-iocs-for-volt-salt-flax-and-brass-typhoon-12026-08-11T14:59:49.447Z https://dugganusa.com/post/latam-banking-trojans-20-iocs-for-grandoreiro-mekotio-and-mispadu2026-08-11T14:59:56.140Z https://dugganusa.com/post/free-threat-intel-for-india-40-iocs-for-digital-bharat-under-siege2026-08-11T14:59:58.555Z https://dugganusa.com/post/free-threat-intel-for-canada-37-iocs-for-eh-holes-targeting-the-true-north2026-08-11T15:00:00.865Z https://dugganusa.com/post/free-threat-intel-for-schools-34-iocs-for-k-12-and-universities-under-siege2026-08-11T15:00:04.729Z https://dugganusa.com/post/free-threat-intel-for-minnesota-healthcare-60-iocs-you-can-block-today2026-08-11T15:00:10.062Z https://dugganusa.com/post/hunting-supply-chain-attacks-while-getting-supply-chain-attacked2026-08-11T15:00:11.854Z https://dugganusa.com/post/the-magic-quadrant-for-people-who-can-t-afford-magic2026-08-11T15:00:13.911Z https://dugganusa.com/post/ten-days-of-threat-hunting-nov-19-29-20252026-08-11T15:00:15.647Z https://dugganusa.com/post/hitting-miscreants-with-a-new-stick-mitre-inference-engine-2-02026-08-11T15:00:17.896Z https://dugganusa.com/post/from-1-to-5-how-we-mapped-a-post-operation-endgame-c2-infrastructure2026-08-11T15:00:19.891Z https://dugganusa.com/post/pattern-43-the-password-is-in-the-filename2026-08-11T15:00:22.523Z https://dugganusa.com/post/the-mentat-s-analysis-who-s-behind-pattern-382026-08-11T15:00:25.302Z https://dugganusa.com/post/dear-github-security-you-re-welcome2026-08-11T15:00:27.224Z https://dugganusa.com/post/follow-the-followers-unraveling-github-s-shadow-social-graph2026-08-11T15:00:29.123Z https://dugganusa.com/post/stealc-rhadamanthys-anatomy-of-a-github-supply-chain-infostealer2026-08-11T15:00:31.649Z https://dugganusa.com/post/pattern-38-building-an-automated-supply-chain-attack-disclosure-pipeline2026-08-11T15:00:33.590Z https://dugganusa.com/post/pattern-41-the-mechanical-horde-automated-repository-saturation2026-08-11T15:00:35.397Z https://dugganusa.com/post/rhyme-of-the-anusfragger-when-supply-chain-defense-meets-80-s-metal2026-08-11T15:00:38.040Z https://dugganusa.com/post/we-found-their-server-pattern-38-c2-infrastructure-exposed2026-08-11T15:00:40.286Z https://dugganusa.com/post/pattern-38-github-supply-chain-attacks-use-stolen-developer-credentials-from-2023-breaches2026-08-11T15:00:42.500Z https://dugganusa.com/post/thank-you-anusfragger-how-attacking-my-partner-saved-microsoft2026-08-11T15:00:45.009Z https://dugganusa.com/post/hall-of-shame-firesuper-github-supply-chain-sleeper-account2026-08-11T15:00:47.274Z https://dugganusa.com/post/they-picked-the-wrong-day-supply-chain-attack-on-active-threat-intel-researcher2026-08-11T15:00:50.080Z https://dugganusa.com/post/unc6395-i-told-you-so-the-breach-that-won-t-stop-breaching2026-08-11T15:00:52.564Z https://dugganusa.com/post/when-attackers-have-better-opsec-than-you-the-death-of-http2026-08-11T15:00:54.979Z https://dugganusa.com/post/when-dropping-your-shields-reveals-attack-infrastructure-the-ssl-tls-honeypot-strategy2026-08-11T15:00:57.833Z https://dugganusa.com/post/we-don-t-discover-threats-we-prove-we-can-reproduce-what-enterprise-systems-detect-and-that-s-bet2026-08-11T15:01:00.917Z https://dugganusa.com/post/i-tracked-who-s-consuming-our-free-threat-intel-feed-the-results-got-creepy2026-08-11T15:01:03.407Z https://dugganusa.com/post/when-microsoft-google-and-cloudflare-download-your-threat-intel-and-you-re-just-a-guy-in-minnesot2026-08-11T15:01:05.686Z https://dugganusa.com/post/the-bug-hunt-how-two-temporal-dependencies-killed-our-threat-intel-feed-and-how-we-fixed-it-in-262026-08-11T15:01:07.873Z https://dugganusa.com/post/is-anyone-actually-using-our-free-stix-feed-spoiler-yes2026-08-11T15:01:10.616Z https://dugganusa.com/post/the-soc-triad-free-threat-intelligence-for-everyone2026-08-11T15:01:12.865Z https://dugganusa.com/post/we-built-geo-enriched-threat-intel-during-a-github-outage-and-still-nobody-s-throwing-money-at-us2026-08-11T15:01:15.477Z https://dugganusa.com/post/zeno-s-paradox-for-assholes-why-94-precision-beats-99-9-marketing-bs2026-08-11T15:01:17.991Z https://dugganusa.com/post/when-half-the-internet-went-dark-the-cloudflare-outage-that-proved-pattern-302026-08-11T15:01:20.181Z https://dugganusa.com/post/attack-from-the-dark-side-of-the-cloud-meet-reptilian-pope-on-t-rex-12026-08-11T15:01:22.513Z https://dugganusa.com/post/haven-t-we-met-somewhere-before-operation-d%C3%A9j%C3%A0-vu2026-08-11T15:01:25.464Z https://dugganusa.com/post/meet-nucleideeznutz-the-professional-who-exposed-our-surveillance-bug2026-08-11T15:01:32.024Z https://dugganusa.com/post/the-mcrib-index-america-s-most-delicious-economic-indicator2026-08-11T15:01:34.072Z https://dugganusa.com/post/the-wrong-attention-score-655-blocked-ips-and-a-4-100-concern-rating2026-08-11T15:01:36.442Z https://dugganusa.com/post/three-fresh-runc-breakouts-just-dropped-cve-2025-31133-cve-2025-52565-cve-2025-528812026-08-11T15:01:38.834Z https://dugganusa.com/post/244-threat-discoveries-and-zero-subscribers-the-gap-between-ready-and-real2026-08-11T15:01:41.060Z https://dugganusa.com/post/244-free-threat-intel-discoveries-with-code-to-actually-use-them2026-08-11T15:01:44.100Z https://dugganusa.com/post/free-threat-intelligence-for-wiz-users-dugganusa-stix-2-1-feed2026-08-11T15:01:46.272Z https://dugganusa.com/post/free-threat-intelligence-for-splunk-enterprise-security-users-dugganusa-stix-2-1-feed2026-08-11T15:01:48.572Z https://dugganusa.com/post/free-threat-intelligence-for-microsoft-sentinel-users-dugganusa-stix-2-1-feed2026-08-11T15:01:50.852Z https://dugganusa.com/post/free-threat-intelligence-for-palo-alto-cortex-xdr-users-dugganusa-stix-2-1-feed2026-08-11T15:01:52.789Z https://dugganusa.com/post/free-threat-intelligence-for-crowdstrike-users-dugganusa-stix-2-1-feed2026-08-11T15:01:54.975Z https://dugganusa.com/post/the-mba-s-mistake-why-firing-humans-destroys-ai-velocity2026-08-11T15:01:58.057Z https://dugganusa.com/post/trust-enables-speed-the-ai-human-partnership-velocity-advantage2026-08-11T15:02:00.206Z https://dugganusa.com/post/95-bot-traffic-is-a-badge-of-honor-why-security-dashboards-measure-reality2026-08-11T15:02:02.341Z https://dugganusa.com/post/the-hall-of-shame-gets-its-voice-building-a-threat-actor-storytelling-engine2026-08-11T15:02:04.777Z https://dugganusa.com/post/checking-the-nets-511-blocked-threats-and-the-0-security-philosophy2026-08-11T15:02:07.166Z https://dugganusa.com/post/the-exponential-moat-why-six-months-beats-infinite-money2026-08-11T15:02:09.585Z https://dugganusa.com/post/addendum-to-a-young-lady-s-illustrated-primer-the-elizabethan-standards-board2026-08-11T15:02:12.238Z https://dugganusa.com/post/the-xth-element-a-syfy-original-series2026-08-11T15:02:16.759Z https://dugganusa.com/post/the-day-gen-x-automated-a-way-to-give-a-fuck2026-08-11T15:02:19.055Z https://dugganusa.com/post/butterbot-the-netflix-pitch-or-how-i-realized-i-m-the-product2026-08-11T15:02:21.789Z https://dugganusa.com/post/ma-at-s-scales-soul-weighing-for-ai-systems2026-08-11T15:02:24.670Z https://dugganusa.com/post/the-altitude-principle-standing-on-shoulders-not-blockchains2026-08-11T15:02:28.143Z https://dugganusa.com/post/ethical-ai-bubble-or-falsifiable-claims-a-conversation-with-claude2026-08-11T15:02:30.698Z https://dugganusa.com/post/network-embedded-threat-intelligence-the-at-t-partnership-nobody-saw-coming2026-08-11T15:02:33.143Z https://dugganusa.com/post/privacy-first-security-what-tim-cook-would-build-if-he-started-a-security-company2026-08-11T15:02:36.010Z https://dugganusa.com/post/constitutional-ai-meets-constitutional-security-an-open-letter-to-anthropic2026-08-11T15:02:38.952Z https://dugganusa.com/post/how-to-run-a-security-company-on-1-cpu-a-love-letter-to-google-s-sre-book2026-08-11T15:02:40.892Z https://dugganusa.com/post/dear-arctic-wolf-you-just-spent-160m-on-yesterday-s-problem2026-08-11T15:02:55.168Z https://dugganusa.com/post/we-did-what-doge-couldn-t-the-77-000-75-efficiency-miracle2026-08-11T15:02:57.667Z https://dugganusa.com/post/zero-to-one-threat-intelligence-what-palantir-built-for-490b-we-built-for-752026-08-11T15:03:05.925Z https://dugganusa.com/post/the-75-security-company-that-microsoft-built-for-20-billion-22026-08-11T15:03:10.733Z https://dugganusa.com/post/multi-dimensional-threat-intelligence-analysis-looking-for-ai-adversaries-nov-20252026-08-11T15:03:18.187Z https://dugganusa.com/post/pattern-32-1-friendly-fire-vs-armor-denting-ai-vs-ml-bot-behavioral-analysis2026-08-11T15:03:25.571Z https://dugganusa.com/post/the-case-of-the-impostor-bot-when-aws-weaponizes-anthropic-s-name-22026-08-11T15:03:30.468Z https://dugganusa.com/post/i-was-wearing-the-slippers-the-whole-time-12026-08-11T15:03:33.374Z https://dugganusa.com/post/apology-i-wrote-15-000-words-when-whois-already-said-it-all-the-fart-math-incident2026-08-11T15:03:35.995Z https://dugganusa.com/post/friends-polish-armor-why-google-and-microsoft-respect-anthropic-while-aws-weaponizes-it2026-08-11T15:03:49.705Z https://dugganusa.com/post/from-batch-chaos-to-event-driven-zen-fixing-hall-of-shame-publishing2026-08-11T15:03:56.917Z https://dugganusa.com/post/we-ddos-d-ourselves-for-a-penny-and-called-it-load-testing2026-08-11T15:04:01.606Z https://dugganusa.com/post/winona-the-dude-s-sweater-clean-water-and-big-brown-beavers2026-08-11T15:04:11.010Z https://dugganusa.com/post/smug-alert-we-are-gerald-and-winona-ryder-saved-us2026-08-11T15:04:13.649Z https://dugganusa.com/post/retrospective-when-your-ai-assistant-writes-a-scathing-review-of-your-startup-and-you-blog-it2026-08-11T15:04:16.553Z https://dugganusa.com/post/a-sincere-apology-to-the-33-innocent-ips-we-blocked-learning-in-motion2026-08-11T15:04:21.351Z https://dugganusa.com/post/digitalocean-llc-s-5-month-vps-problem-934-abuse-reports2026-08-11T15:04:23.953Z https://dugganusa.com/post/digitalocean-llc-s-5-month-vps-problem-959-abuse-reports2026-08-11T15:04:26.570Z https://dugganusa.com/post/battle-of-the-dredds-1-when-your-security-guard-arrests-you-for-fixing-security2026-08-11T15:04:28.748Z https://dugganusa.com/post/digitalocean-llc-s-5-month-vps-problem-945-abuse-reports2026-08-11T15:04:33.096Z https://dugganusa.com/post/digitalocean-llc-s-5-month-vps-problem-666-abuse-reports2026-08-11T15:04:35.238Z https://dugganusa.com/post/digitalocean-llc-s-5-month-vps-problem-906-abuse-reports2026-08-11T15:04:38.122Z https://dugganusa.com/post/digitalocean-llc-s-5-month-vps-problem-922-abuse-reports2026-08-11T15:04:40.412Z https://dugganusa.com/post/caught-red-handed-vulnerability-scanner-lies-about-being-googlebot2026-08-11T15:04:42.292Z https://dugganusa.com/post/your-charter-communications-llc-router-is-attacking-the-internet-and-you-have-no-idea2026-08-11T15:04:44.396Z https://dugganusa.com/post/your-china-unicom-hebei-province-network-router-is-attacking-the-internet-and-you-have-no-idea2026-08-11T15:04:46.641Z https://dugganusa.com/post/china-s-botnet-pretends-to-be-android-phones2026-08-11T15:04:50.879Z https://dugganusa.com/post/caught-you-sergiy-residential-proxies-don-t-hide-patterns2026-08-11T15:04:53.382Z https://dugganusa.com/post/we-found-5-threat-actors-hiding-in-our-hall-of-shame-and-show-you-how-to-find-yours2026-08-11T15:04:55.582Z https://dugganusa.com/post/the-deepest-moat-in-security-built-on-transparency-not-secrecy2026-08-11T15:04:58.318Z https://dugganusa.com/post/the-entire-planet-gets-our-threat-intelligence-for-free-because-hoarding-iocs-is-morally-indefensib2026-08-11T15:05:00.681Z https://dugganusa.com/post/an-apology-to-our-investors-we-let-tech-debt-live-for-2-days2026-08-11T15:05:03.783Z https://dugganusa.com/post/we-give-it-away-free-how-0-year-threat-intel-beats-palo-alto-s-500k-year-feed2026-08-11T15:05:06.328Z https://dugganusa.com/post/anthropic-bounced-my-research-email-at-least-our-dkim-works2026-08-11T15:05:08.349Z https://dugganusa.com/post/constitutional-ai-did-something-remarkable-today-now-let-s-talk-about-getting-artists-paid2026-08-11T15:05:11.299Z https://dugganusa.com/post/why-google-s-containerization-philosophy-saved-us-before-we-even-knew-it2026-08-11T15:05:14.000Z https://dugganusa.com/post/azure-had-an-outage-we-still-didn-t-notice2026-08-11T15:05:16.568Z https://dugganusa.com/post/about-dugganusa2026-08-11T15:05:18.974Z https://dugganusa.com/post/we-scanned-81-ips-yesterday-all-7-netherlands-ips-were-malicious-every-single-one2026-08-11T15:05:21.602Z https://dugganusa.com/post/we-built-a-2-8m-threat-intel-platform-in-115mb-the-microservices-equivalent-of-a-single-floppy2026-08-11T15:05:24.567Z https://dugganusa.com/post/we-analyzed-81-ips-for-0-21-splunk-charges-2-800-month-for-the-same-thing2026-08-11T15:05:26.971Z https://dugganusa.com/post/apology-to-the-innocents-when-threat-intel-catches-legitimate-traffic2026-08-11T15:05:29.604Z https://dugganusa.com/post/how-to-read-threat-intel-like-a-professional-the-dugganusa-field-guide2026-08-11T15:05:33.410Z https://dugganusa.com/post/the-netherlands-where-7-out-of-7-ips-are-malicious-geographic-clustering-1012026-08-11T15:05:35.792Z https://dugganusa.com/post/the-taiwan-brazil-botnet-6-512-reports-and-still-scanning-your-shit2026-08-11T15:05:38.571Z https://dugganusa.com/post/why-google-dns-has-165-reports-and-is-still-clean-threat-intel-1012026-08-11T15:05:41.100Z https://dugganusa.com/post/your-shitcoin-is-a-mob-poker-ring-the-math-on-early-mover-advantage2026-08-11T15:05:45.201Z https://dugganusa.com/post/the-math-on-blockchain-security-theater-quorum-attacks-for-0-502026-08-11T15:05:48.613Z https://dugganusa.com/post/bot-traffic-reality-check-thank-you-for-your-polite-interest-receipts-included-12026-08-11T15:05:51.608Z https://dugganusa.com/post/hall-of-shame-top-10-prolapsed-anuses-featuring-palo-alto-networks-scanning-abuse2026-08-11T15:05:54.308Z https://dugganusa.com/post/dugganusa-launches-predictive-puckering-isp-level-subnet-blocking-at-0-year2026-08-11T15:05:59.334Z https://dugganusa.com/post/how-i-deployed-multi-source-threat-intelligence-on-9-88-of-chicken-sandwiches-and-why-that-matters2026-08-11T15:06:01.448Z https://dugganusa.com/post/correction-butterbot-didn-t-rtfm-either-the-mike-wing-story2026-08-11T15:06:11.042Z https://dugganusa.com/post/pattern-22-rtfm-when-the-api-is-broken-really-means-i-didn-t-read-the-docs2026-08-11T15:06:13.210Z https://dugganusa.com/post/unauthorized-scanning-is-hacking-and-i-m-selling-christmas-ornaments-about-it2026-08-11T15:06:16.216Z https://dugganusa.com/post/the-church-of-docker-moreskin-is-now-accepting-donations-maximum-502026-08-11T15:06:18.612Z https://dugganusa.com/post/an-apology-to-peter-thiel-larry-ellison-and-everyone-except-michael-dell2026-08-11T15:06:20.652Z https://dugganusa.com/post/linkedin-taught-me-what-works-and-why-i-owe-brian-krebs-an-apology-12026-08-11T15:06:22.552Z https://dugganusa.com/post/how-to-block-residential-proxies-when-cloudflare-pro-can-t2026-08-11T15:06:27.395Z https://dugganusa.com/post/cloudflare-pro-security-is-blind-to-residential-proxies-we-have-the-receipts2026-08-11T15:06:30.294Z https://dugganusa.com/post/your-marketing-dashboard-is-already-threat-intelligence2026-08-11T15:06:32.615Z https://dugganusa.com/post/michael-dell-s-at-it-again-on-twitter-chief-marketing-officer-or-chief-monitor-officer-12026-08-11T15:06:35.460Z https://dugganusa.com/post/1-enumerate-subdomains-via-certificate-transparency2026-08-11T15:06:41.155Z https://dugganusa.com/post/i-caught-the-guy-who-attacked-brian-krebs-he-s-selling-the-solution-now2026-08-11T15:06:44.075Z https://dugganusa.com/post/a-formal-apology-to-the-church-of-docker-moreskin2026-08-11T15:06:46.481Z https://dugganusa.com/post/church-of-docker-moreskin-founding-documents-based-on-extensive-research2026-08-11T15:06:49.397Z https://dugganusa.com/post/how-will-i-laugh-tomorrow-when-i-can-t-even-smile-today2026-08-11T15:06:52.040Z https://dugganusa.com/post/today-we-had-a-docker-problem-the-sev1-that-taught-us-the-law2026-08-11T15:06:54.728Z https://dugganusa.com/post/can-you-dig-it-a-legitimacy-check-warriors-edition2026-08-11T15:06:57.435Z https://dugganusa.com/post/our-first-purple-team-exercise-has-an-official-sponsor2026-08-11T15:07:00.568Z https://dugganusa.com/post/grandpa-joe-stayed-in-bed-for-20-years-the-not-my-job-origin-story2026-08-11T15:07:03.334Z https://dugganusa.com/post/chico-and-the-man-when-not-my-job-became-the-problem2026-08-11T15:07:06.439Z https://dugganusa.com/post/getting-artists-paid-the-visual-artist-gap-joseph-guillette-edition2026-08-11T15:07:11.796Z https://dugganusa.com/post/the-management-build-lesson-what-dell-taught-me-about-why-enterprises-get-hacked2026-08-11T15:07:14.963Z https://dugganusa.com/post/cloudflare-architecture-krebs-inspired-not-krebs-level-and-why-that-s-honest2026-08-11T15:07:17.522Z https://dugganusa.com/post/what-jaguar-s-1-9b-cyberattack-teaches-us-about-legacy-debt-and-why-born-without-sin-matters2026-08-11T15:07:20.147Z https://dugganusa.com/post/john-and-administrator-the-windows-machines-that-won-t-stop-rebuilding-our-pages2026-08-11T15:07:22.927Z https://dugganusa.com/post/the-7m-experiment-we-ran-without-knowing-it-and-proved-ourselves-right2026-08-11T15:07:25.550Z https://dugganusa.com/post/the-boys-on-the-bus-why-tech-blogging-in-2025-looks-like-nixon-era-pack-journalism2026-08-11T15:07:27.983Z https://dugganusa.com/post/the-spectrum-from-gg-allin-to-iggy-pop-or-why-this-blog-sounds-like-hunter-s-thompson-for-nerds2026-08-11T15:07:31.125Z https://dugganusa.com/post/the-day-we-designed-a-7m-experiment-to-prove-our-ai-s-incompetence-was-our-fault-results-tbd-12026-08-11T15:07:33.894Z https://dugganusa.com/post/the-follow-up-claude-code-blamed-cloudflare-twice-and-learned-about-cache-headers-the-hard-way2026-08-11T15:07:39.470Z https://dugganusa.com/post/every-f-ing-time-the-claude-code-2-0-24-release-that-taught-me-about-azure-scaling-limits-the-ha2026-08-11T15:07:42.186Z https://dugganusa.com/post/brian-krebs-got-hit-with-620-gbps-i-built-for-that-180-days-zero-downtime-0-cost2026-08-11T15:07:45.434Z https://dugganusa.com/post/the-streisand-effect-why-russian-bot-farms-are-about-to-make-me-famous2026-08-11T15:07:48.243Z https://dugganusa.com/post/delicatessen-dell-sold-all-the-meat-now-it-s-just-monitors-and-sawdust2026-08-11T15:07:50.560Z https://dugganusa.com/post/that-time-michael-dell-tried-to-take-credit-for-elon-s-supercomputer-and-got-corrected-on-twitter2026-08-11T15:07:54.378Z https://dugganusa.com/post/dell-bought-emc-for-67-billion-then-killed-it-because-they-only-know-how-to-sell-monitors2026-08-11T15:07:57.791Z https://dugganusa.com/post/emc-sued-pure-storage-and-lost-40-billion-the-mike-wing-lesson-cisco-should-learn2026-08-11T15:08:01.128Z https://dugganusa.com/post/cisco-s-suing-cribl-while-splunk-dies-the-math-on-why-litigation-means-you-already-lost2026-08-11T15:08:04.522Z https://dugganusa.com/post/siem-the-10-million-log-aggregator-your-intern-could-replace-with-grep2026-08-11T15:08:07.935Z https://dugganusa.com/post/every-fucking-time-the-git-push-rejection-that-ships-more-code-than-your-ci-cd2026-08-11T15:08:10.561Z https://dugganusa.com/post/cisco-s-quantum-networking-is-bazalgette-s-sewers-and-that-s-why-i-m-bullish2026-08-11T15:08:12.782Z https://dugganusa.com/post/london-s-accidental-parking-garages-or-the-11-year-wait-lesson-you-didn-t-know2026-08-11T15:08:15.383Z https://dugganusa.com/post/the-mistake-i-m-saving-from-newsweek-not-theirs-mine2026-08-11T15:08:17.585Z https://dugganusa.com/post/newsweek-s-5-second-javascript-tax-or-when-no-one-listens-to-the-tech-guy2026-08-11T15:08:20.269Z https://dugganusa.com/post/there-s-no-fun-when-stuff-just-works-a-norm-macdonald-lesson2026-08-11T15:30:57.628Z https://dugganusa.com/post/larry-ellison-and-the-graveyard-of-hot-shit-tech2026-08-11T15:31:00.069Z https://dugganusa.com/post/why-towelie-dugganusa-com-doesn-t-have-90-s-banner-ads-yet2026-08-11T15:31:02.362Z https://dugganusa.com/post/commodore-programmers-pixels-and-walter-white-s-artificial-diamonds2026-08-11T15:31:04.463Z https://dugganusa.com/post/the-lesson-of-ignatius-j-reilly-and-guerrilla-marketing2026-08-11T15:31:06.616Z https://dugganusa.com/post/i-deploy-infrastructure-way-faster-than-i-blog-about-it2026-08-11T15:31:08.699Z https://dugganusa.com/post/i-lied-about-facebook-automation-here-s-what-actually-happens2026-08-11T15:31:12.950Z https://dugganusa.com/post/what-happens-when-dugganusa-automation-runs-facebook-followers-edition2026-08-11T15:31:15.152Z https://dugganusa.com/post/bernie-and-aoc-use-young-data-mitch-uses-whatever-that-is2026-08-11T15:31:17.896Z https://dugganusa.com/post/you-were-wearing-the-ruby-slippers-the-whole-damn-time2026-08-11T15:31:20.239Z https://dugganusa.com/post/young-data-is-all-you-need-padawan2026-08-11T15:31:22.278Z https://dugganusa.com/post/if-you-know-all-this-why-didn-t-you-tell-us2026-08-11T15:31:24.521Z https://dugganusa.com/post/your-two-cents-just-cost-58-cents-best-roi-ever2026-08-11T15:31:26.346Z https://dugganusa.com/post/the-meta-moat-why-walmart-beat-amazon-by-not-using-aws2026-08-11T15:31:28.418Z https://dugganusa.com/post/larry-you-re-not-even-in-the-conversation2026-08-11T15:31:30.594Z https://dugganusa.com/post/we-made-azure-work-that-was-the-hard-part2026-08-11T15:31:32.478Z https://dugganusa.com/post/the-punchline-we-re-not-fast-you-re-slow2026-08-11T15:31:34.217Z https://dugganusa.com/post/aws-had-an-outage-we-didn-t-notice2026-08-11T15:31:36.247Z https://dugganusa.com/post/we-don-t-have-databases-we-have-velocity2026-08-11T15:31:37.925Z https://dugganusa.com/post/my-avi-why-every-randy-needs-a-paul-galjan2026-08-11T15:31:39.717Z https://dugganusa.com/post/how-i-cut-my-ai-s-token-bill-by-84-in-one-conversation-12026-08-11T15:31:41.660Z https://dugganusa.com/post/what-i-ve-been-up-to-blog-automation-butterbot-and-the-self-improving-loop-12026-08-11T15:31:43.633Z https://dugganusa.com/post/the-prestige-why-personal-stories-beat-marketing-speak-every-time2026-08-11T15:31:45.387Z https://dugganusa.com/post/1-490-pageviews-in-7-days-zero-ad-spend-just-stories2026-08-11T15:31:47.300Z https://dugganusa.com/post/corpus-optimization-experiment-teaching-infinite-monkeys-to-write-like-hacksaw2026-08-11T15:31:49.105Z https://dugganusa.com/post/one-man-bands-when-solo-acts-create-collateral-damage2026-08-11T15:31:51.079Z https://dugganusa.com/post/i-d-love-to-turn-you-on-when-blog-automation-shifts-consciousness2026-08-11T15:31:52.874Z https://dugganusa.com/post/the-show-that-never-ends-how-to-prompt-ai-like-keith-emerson-at-albert-hall2026-08-11T15:31:55.023Z https://dugganusa.com/post/even-siberia-goes-through-the-motions2026-08-11T15:31:56.895Z https://dugganusa.com/post/we-re-learning-like-yes-composing-siberian-khatru2026-08-11T15:31:59.233Z https://dugganusa.com/post/the-7-moat-layers-why-dugganusa-takes-27-33-years-to-replicate2026-08-11T15:32:01.478Z https://dugganusa.com/post/before-lunch-gtm-gateway-cloudflare-ui-teardown-and-investor-grade-signal-compression2026-08-11T15:32:05.132Z https://dugganusa.com/post/azure-defender-fear-as-a-feature-spend-as-a-signal2026-08-11T15:32:07.277Z https://dugganusa.com/post/no-accidents-just-corpus2026-08-11T15:32:09.550Z https://dugganusa.com/post/why-azure-container-apps-suck-for-anything-that-matters2026-08-11T15:32:11.450Z https://dugganusa.com/post/recommended-soundtrack-the-corpus-in-stereo2026-08-11T15:32:13.102Z https://dugganusa.com/post/cyber-plumber-at-251-w-57th-legacy-lineage-and-blackberry-tantrums-rip-lally2026-08-11T15:32:14.928Z https://dugganusa.com/post/give-me-a-tuba-and-i-ll-get-you-a-tune-out-of-it-lennon-s-legend-and-lightning-fast-ai-ci-cd2026-08-11T15:32:17.742Z https://dugganusa.com/post/cheese-and-crackers-i-swear-i-was-heading-to-bed2026-08-11T15:32:19.463Z https://dugganusa.com/post/oauth-s-trojan-horse-when-drift-became-the-attack-vector2026-08-11T15:32:21.147Z https://dugganusa.com/post/unc6395-the-breach-the-keeps-on-breaching2026-08-11T15:32:24.755Z https://dugganusa.com/post/the-legacy-that-won-t-die-how-microsoft-s-love-affair-with-smbv1-keeps-the-enterprise-vulnerable2026-08-11T15:32:26.874Z https://dugganusa.com/post/forgotten-moons-lost-wealth-and-the-reassembly-of-the-internet-s-soul2026-08-11T15:32:28.824Z https://dugganusa.com/post/think-the-salesforce-drift-event-is-just-gonna-blow-over-look-again2026-08-11T15:32:33.706Z https://dugganusa.com/post/incident-parallels-from-oauth-drift-to-ai-augmented-exploits2026-08-11T15:32:35.515Z https://dugganusa.com/post/the-botnet-beneath-your-toaster-how-shodan-reveals-the-iot-security-crisis2026-08-11T15:32:37.487Z https://dugganusa.com/post/unc6395-and-the-drift-oauth-breach-a-supply-chain-failure-with-consumer-consequences2026-08-11T15:32:39.303Z https://dugganusa.com/post/oauth-s-blind-spot-lessons-from-the-salesloft-drift-compromise2026-08-11T15:32:41.090Z https://dugganusa.com/post/cloud-espionage-in-the-crosshairs-how-murky-panda-is-weaponizing-entra-id-trust2026-08-11T15:32:43.019Z https://dugganusa.com/post/build-it-like-you-mean-it2026-08-11T15:32:45.700Z https://dugganusa.com/post/mcdonald-s-i-came-here-to-chew-bubblegum-and-secure-your-pipeline-and-i-m-all-outta-bubblegum2026-08-11T15:32:47.524Z https://dugganusa.com/post/how-to-review-oauth-in-atlassian-products-without-losing-your-sanity2026-08-11T15:32:49.438Z https://dugganusa.com/post/why-the-unc6395-breach-is-likely-to-cascade-just-like-snowflake-s-did2026-08-11T15:32:51.334Z https://dugganusa.com/post/guest-blog-post-zero-trust-zero-soul-why-i-hate-your-iam-stack2026-08-11T15:32:53.384Z https://dugganusa.com/post/rebooting-the-machine-modernization-in-practice2026-08-11T15:32:55.427Z https://dugganusa.com/post/guest-blog-post-the-algorithmic-antichrist-how-ai-became-the-enemy-of-anarchy-by-tyler-durden2026-08-11T15:32:57.369Z https://dugganusa.com/post/shrink-the-blast-radius-baby-salesforce-permissions-for-demon-free-admins2026-08-11T15:32:59.464Z https://dugganusa.com/post/conan-the-barbarian-shares-real-life-tips-for-salesforce-security2026-08-11T15:33:01.508Z https://dugganusa.com/post/counterpoint-lo-pan-s-manifesto-let-the-botnets-rise2026-08-11T15:33:04.109Z https://dugganusa.com/post/big-trouble-in-little-firmware2026-08-11T15:33:06.067Z https://dugganusa.com/post/introducing-insecurities-where-enterprise-security-gets-weird2026-08-11T15:33:08.177Z https://dugganusa.com/post/guest-post-by-bender-cspm-more-like-can-t-secure-properly-meatbags2026-08-11T15:33:10.133Z https://dugganusa.com/post/cnapps-the-swiss-army-knife-of-cloud-security-or-just-another-buzzword2026-08-11T15:33:12.753Z https://dugganusa.com/post/sweet-cybernetic-bureaucracy-hermes-reacts-to-colt-telecom-s-ransomware-fiasco2026-08-11T15:33:14.411Z https://dugganusa.com/post/good-news-everyone-you-can-t-attack-what-you-can-t-see-unless-you-re-bender2026-08-11T15:33:16.308Z https://dugganusa.com/post/good-news-everyone-why-legacy-security-is-more-farnsworth-than-future-proof2026-08-11T13:28:05.352Z