Research & Threat Intel
Field notes from the AxVeil red team — attack methodologies, compliance playbooks, and threat-intel breakdowns written for the engineers and CISOs who have to ship the fix.
AWS Penetration Testing Methodology — End-to-End Playbook
AWS customer-policy permissions, Pacu/ScoutSuite/CloudFox recon, IAM privilege escalation, IMDSv1 vs IMDSv2, EKS pod-to-cluster pivots, and EBS snapshot exfiltration.
OWASP Top 10 2026 — A Practical Checklist for Engineering Teams
Refreshed for the 2026 release. Concrete remediation patterns, sample exploits, and CI test coverage notes for each category.
Lazarus Group: MITRE ATT&CK Techniques and Detection Patterns
Mapped TTPs the group uses against Indian and SE-Asian banking targets. Sigma rules, EDR queries, and SOC-ready detection logic.
VAPT vs. Penetration Testing — What's the Difference?
VAPT bundles automated vulnerability assessment with manual exploitation. When to choose each, what scope to expect, and how regulators read the difference.
Red Team vs. Penetration Test — How to Choose
Pentests find vulnerabilities. Red teams test detection. Picking wrong wastes money and gives you false assurance — here's the decision tree.
SOC 2 Type 1 vs Type 2 — Which One Buyers Actually Want
Type 1 ships fast. Type 2 wins enterprise deals. The trade-off in observation period, audit cost, and revenue unlock.
PCI DSS v4.0 — The 2025 Mandatory Changes Most Teams Missed
Targeted risk analysis, custom controls, MFA-on-everything. The new requirements that go from 'best practice' to 'audit failure' on 1 April 2025.
Bug Bounty vs. Penetration Test — Which Buys You More Security?
They cover different attack surfaces and reach different attackers. Run both, but in the right order — here's the playbook.
Nuclei Templates Explained — Writing Custom Security Checks
How the YAML DSL maps to HTTP/DNS/TCP probes. Build a template that detects your stack's CVEs in under 50 lines.
TIBER-EU Framework — Threat-Led Penetration Testing for European Financial Entities
DORA mandates threat-led red teaming. The TIBER-EU framework defines how. The threat-intel scoping, white-team coordination, and reporting flow.
Get Research in Your Inbox
Monthly threat intelligence digest. No spam, unsubscribe anytime.