InOffensiveBytesbyRushikesh·Oct 13Bridging the Semantic Gap: Agentless Runtime Detection via Hypervisor TrapsA reference architecture for monitoring agent-hostile VMs using LibVMI and Wazuh.
Adilansary·Sep 25From “Probably Working” to “Confirmed”: What Security Testing Changed About My QA MindsetOne of the more uncomfortable lessons I learned while testing security products was that a technically reasonable explanation can still be…
Adilansary·Sep 22The Dashboard Shows Nothing — But Is the Detection Actually Broken?In the previous post, I wrote about security components that looked healthy even though they were not producing the expected output.
Adilansary·Sep 20When “Healthy” Doesn’t Mean Working: Testing a SIEM/XDR as an SQA EngineerOne of the first things I learned while testing a SIEM/XDR platform was that a green status indicator doesn’t necessarily mean very much.
Anurag Singh·Sep 2Your Security Tools Are Working. So Why Did the Attack Still Get Through?The firewall blocked what it could. EDR detected what it saw. SIEM collected the events. So how did the attacker still reach sensitive…
Anurag Singh·Sep 1AI Is Already Inside Cyberattacks. Is Your SOC Built for That Speed?Why the old Detect → Investigate → Respond model is breaking — and what a modern AI-driven SOC needs to look like in 2026
Nijin K·Aug 26PyPI Supply Chain Attack: How the Malicious mlflow-otel-instrumentor Package Dropped a Crypto MinerSoftware supply chain attacks continue to be one of the most effective vectors for threat actors targeting developer environments. A prime…
Consilien·Aug 17XDR, Explained Without the Sales PitchXDR (extended detection and response) is security software that collects threat data from your endpoints, email, network, cloud, and…
Talha·Jul 21Recovering an XDR Platform After an Unexpected Ubuntu VM ShutdownAn unexpected shutdown of an Ubuntu virtual machine turned into a multi-layer recovery exercise across the operating system, Kubernetes…
