Skip to content
Latest
BINDCLOAK Shows Why C2 Detection Needs Message-Level VisibilityPasskey Attacks Show Why Passwordless Still Needs Endpoint DefenseDPRK npm Compromises Show Why Dependency Trust Is Now Identity RiskN-able N-central Exploitation Shows Why MSP Tools Are Control-Plane RiskHOLLOWGRAPH Shows Why Microsoft 365 Is Now Part of the C2 BattlefieldFuyao Android TV Botnet Shows Why Cheap Streaming Sticks Are Business Network RiskSonicWall SMA Exploit Chain Shows Why VPN Appliances Need Incident Response, Not Just PatchingAdform Script Compromise Shows Why Third-Party Tags Need Supply-Chain ControlsCaptiveCrunch Shows Why Travel Wi-Fi Is Now an Identity Attack SurfaceXCSSET v40 Shows Why Developer Macs Are Supply-Chain Infrastructure84 4G/5G Core Flaws Show Why Telecom Trust Zones Need Zero TrustAstaroth WhatsApp Web Spambot Shows Browser Sessions Are Distribution InfrastructureTA488 Turns Outlook Web Access Into a Stealthy Persistence LayerOpen Source Supply Chain Compromise Needs Build-Pipeline Defense, Not Just Dependency Scanning

Blog

Notes from the field.

Newsletter

The House-Of-L Brief.

Two short reads a day on markets, cyber threats, AI, and geopolitics. A "why it matters" line on every story.

Double opt-in. One-click unsubscribe on every issue. We never share your address.