detection engineering
76 posts
Article
The Roblox cheat never touched Roblox
How a Roblox cheat turned into a Vercel supply chain compromise - stealer to stolen token to dependency confusion to persistent build-pipeline access.
Article
Vercel hands attackers your build pipeline
Technical IR playbook for a Vercel CI/CD compromise: attack chain, MITRE ATT&CK mapping, telemetry gaps, containment sequence, and residual exposure.
Article
Your MSSP is selling you blindness.
MSSPs run perimeter-era detection while attackers operate inside the identity boundary. The gap is structural, not a resourcing problem.
Article
Your security pipeline missed 271 bugs
Mozilla's Anthropic Mythos scan surfaced 271 Firefox 150 vulnerabilities. The delta exposes the limit of single-pipeline vulnerability assurance.