Microsoft introduced Credential Guard in Windows 10 (2015) and Windows Server 2016 to prevent credential harvesting from the LSASS process that was abused for years by threat actors. Microsoft used…

Daniel Knight, CEO at Vulnetic

Agent Control Protocol (ACP) is a formal technical specification for governance ofautonomous agents in B2B institutional environments. ACP is the admission controllayer between agent intent and system state mutation: before any agent action reachesexecution…

From individual incident response to tracking adversaries across campaigns. Activity threading, analytic pivoting, and turning your own incidents into detection opportunities and structured threat intelligence.

The Long Decompilation Process Over the last eight or so years of performing security research at Assetnote, our research team has looked at countless enterprise applications that ship with hundreds, sometimes thousands, of vendor dependencies. This problem…

We embedded 58 hardware entropy sources into the same vector space. They are not independent.

As AI spending races toward $2.5 trillion, the network connecting it all has become the weakest link. Here's how zero-trust overlay networking addresses the security and connectivity challenges of distributed AI infrastructure.

We assume security is about static defense. We assume automation is always deterministic. We assume risk is managed by limiting access. Every single one of t...

SolarWinds. Ivanti. SysAid. ManageEngine. Giants of the KEV world, all of whom have ITSM side-projects.

ITSMs, as a group of solutions, have played pivotal roles in numerous ransomware gang campaigns - not only do they represent code running on a system…

A list of SEC cybersecurity incidents, AI-tagged with Duke's incident taxonomy and enriched with additional context.