Same disclosure as my Shipwright and Sigmaforge posts: I am not a programmer. I direct AI agents, give feedback, and decide what to accept or reject; the agents do the core build. That includes the...

Same disclosure as my Shipwright post: I am not a programmer. I direct AI agents, give feedback, and decide what to accept or reject; the agents do the core build. Sigmaforge was built that way, en...

I should say this up front, because it shapes everything below: I am not a programmer. I direct AI agents and I decide whether to accept or reject what they produce. The three security CLIs I have ...

A customer contacts TryNotHackMe, an MSSP, concerned about Keegan’s workstation. Some files have a strange extension — possible ransomware. The task: investigate what happened on May 16th, 2022 usi...

It’s Friday afternoon and a finance company has just dropped a bag of malware on your desk. That’s the setup. I’m playing a CTI analyst at PandaProbe Intelligence, and SwiftSpend Finance has sent i...

A multinational technology company has been hit by attackers stealing intellectual property. The task isn’t to break into anything. It’s to read. I’m handed a threat advisory report about a group t...

Vectara is part of the 2026: An AI Odyssey CTF event. Seven challenges across four AI attack categories: prompt injection, supply chain tampering, data poisoning, and agentic AI exploitation. The l...

The Boogeyman returns a third time, now targeting the CEO of Quick Logistics LLC with a spear-phishing email. The attachment is an ISO file containing an HTA payload. The investigation platform is ...

Nine TryHackMe rooms, one thread: how do you actually see what’s happening on a system — and how do real attacks show up in those logs? The three Logging rooms lay the foundation. The six Threat De...

The Boogeyman returns. This time the delivery mechanism is a malicious Word document disguised as a job application resume. The victim is Maxine, an HR specialist at Quick Logistics LLC. Two artefa...