A practitioner’s tutorial for checking whether your email, your domain, or your employees show up in fresh infostealer logs — using Hudson Rock’s free tools, IntelX, Have I Been Pwned, and a couple of paid options worth the spend.
Jesse William McGraw
Jesse William McGraw
Jesse William McGraw, also known as GhostExodus, is a former insider threat and threat actor. He became the first person in recent U.S. history to be convicted of corrupting industrial control systems. Today he focuses on threat intelligence, OSINT, and public speaking, using his knowledge to bring awareness to the security risks that organisations and individuals face.
A practitioner’s look inside the “cloud of logs” subscription model — what attackers pay, what they get, and the operational mechanics that turn raw infostealer output into a productised threat.
Stealing your password used to be the goal. In 2026 it’s the consolation prize — modern infostealers go for session cookies, which let attackers impersonate authenticated users without needing to defeat MFA. Here’s how the model works.
A practitioner’s forensic playbook for working backwards from a stealer log to the originating infection — what the log file structure tells you, where the malware sits, and how to clean it up properly.
Hospitals have been the worst ransomware targets for half a decade and the attacks keep getting worse, not better. A practitioner’s look at why the sector remains uniquely vulnerable and what’s finally starting to help.
A practitioner’s guide to ransomware negotiation in 2026 — what professional negotiators do, what amateurs get wrong, and how the conversation has changed since the 2024 takedowns.
A first-person look at how money mule recruitment threads on Telegram actually operate — the pitch, the vetting, the cash-out workflow, and the legal jeopardy facing recruits who don’t fully understand what they’re signing up for.
MFA fatigue attacks keep working because the people approving the prompts are tired, distracted, and trained to tap “approve” by default. Here’s the 2026 playbook attackers use, and the four controls that actually shut it down.
A walk-through of how data brokers stitch your real identity back together from public records, breach datasets, and behavioural signals — and the four steps that make their job harder.
Browser extensions are the soft underbelly of personal privacy in 2026. Here’s how the malicious ones operate, the warning signs that catch most of them, and the audit you should run today.