Research

Notes from the field

Writing on offensive tradecraft, cloud security, threat intelligence, and what it actually takes to run a security program that survives contact with real attackers.

Threat Intelligence

What Changed in Ransomware Tradecraft This Year

Ransomware operators have shifted from smash-and-encrypt to slow, quiet data theft. Here's what that means for detection and response strategy.

Mar 9, 2026#ransomware