top of page
We Made an Album About Catching Malware Networks
---
title: "Threat Intel Has a Soundtrack Now: AI-Generated Punk Rock for Security Research"
slug: threat-intel-has-a-soundtrack-now
date: 2025-12-19
author: Pa
Patrick Duggan
Dec 19, 20253 min read
Follow the Followers: We Found the GitHub Hydra Factory
---
title: "Follow the Followers: We Found the GitHub Hydra Factory Minting Discord Stealers"
slug: github-hydra-factory-discord-stealer-network
date: 2025-12-1
Patrick Duggan
Dec 19, 20255 min read
One Account Starred Both Tools. That's How We Found the Network.
---
title: "Follow the Followers: We Found the GitHub Hydra Factory Minting Discord Stealers"
slug: github-hydra-factory-discord-stealer-network
date: 2025-12-1
Patrick Duggan
Dec 19, 20255 min read
The Disclosure Hit November 9th. We Caught the Exploitation December 17th.
---
title: "We Watched Hackers Weaponize the Mintlify XSS in Real-Time (121 IOCs Captured)"
slug: mintlify-xss-downstream-exploitation-captured
date: 2025-12-19
Patrick Duggan
Dec 19, 20255 min read
When Your Copilot Knows Where the Bodies Are Buried
When Your Copilot Knows Where the Bodies Are Buried
Patrick Duggan
Dec 17, 20254 min read
The 192 Club: Meet the Internet's Biggest Asshole
The 192 Club: Meet the Internet's Biggest Asshole
Patrick Duggan
Dec 16, 20254 min read
The Fastest Threat Intelligence Engine on the Planet (With Receipts)
The Fastest Threat Intelligence Engine on the Planet (With Receipts)
Patrick Duggan
Dec 16, 20254 min read
The ME File Pattern: Why Reddit Thinks Claude Got Dumber (And How to Fix It)
Post-Opus 4, the complaints are everywhere:
- "Claude got dumber"
- "It's too cautious now"
- "It won't just DO things anymore"
- "It keeps asking permission fo
Patrick Duggan
Dec 14, 20254 min read
Hello, Is It Me You're Looking For? A Cautionary Tale About WordPress Honeypots
At 09:25 UTC on a quiet Saturday morning, our WordPress honeypot at analytics.dugganusa.com received a visitor from Frankfurt. Nothing unusual—we get dozens of
Patrick Duggan
Dec 14, 20253 min read
The Setup
---
title: "Hello, Is It Me You're Looking For? A Cautionary Tale About WordPress Honeypots"
date: 2025-12-14
author: Patrick Duggan
tags: [honeypot, threat-int
Patrick Duggan
Dec 14, 20253 min read
Return of the ANUSFRAGGER: Closing the China Cycle
---
title: "Return of the ANUSFRAGGER: Closing the China Cycle"
date: 2025-12-12
author: Patrick Duggan
tags: [pattern-38, china, anusfragger, threat-intelligen
Patrick Duggan
Dec 12, 20254 min read
Dear Huawei Cloud: Thanks for the 289 Requests, Here's 46 Blocks
---
title: "Dear Huawei Cloud: Thanks for the 289 Requests, Here's 46 Blocks"
date: 2025-12-12
author: Patrick Duggan
tags: [huawei, threat-intelligence, counte
Patrick Duggan
Dec 12, 20255 min read
Just Another Day Taking Out the Trash
---
title: "Six Assholes From Beijing: How Routine Trash Collection Caught a Sanctioned Military Company"
date: 2025-12-12
author: Patrick Duggan
tags: [threat-
Patrick Duggan
Dec 12, 20255 min read
The Fastest Threat Intelligence Engine on the Planet (With Receipts)
The Fastest Threat Intelligence Engine on the Planet (With Receipts)
Patrick Duggan
Dec 12, 20255 min read
The Receipts
---
title: "Who Are The Bad Guys Right Now? December 2025 Threat Landscape with Receipts"
slug: bad-guys-december-2025-threat-landscape
date: 2025-12-12
author:
Patrick Duggan
Dec 11, 20256 min read
The Numbers Don't Lie
---
title: "44% Original Threat Discoveries: Why Microsoft Is Polling Our Free Feed 214 Times a Week"
slug: stix-feed-quality-microsoft-polling
date: 2025-12-12
Patrick Duggan
Dec 11, 20254 min read
Integrating STIX/TAXII Threat Intelligence Feeds with Palo Alto Products: A Practical Guide
---
title: "Integrating STIX/TAXII Threat Intelligence Feeds with Palo Alto Products: A Practical Guide"
slug: stix-taxii-palo-alto-integration-guide
date: 2025
Patrick Duggan
Dec 11, 20257 min read
The Font is DEI Now: When Accessibility Becomes Political Theater
---
title: "The Font is DEI Now: When Accessibility Becomes Political Theater"
slug: dei-font-controversy-accessibility-first
date: 2025-12-10
author: Patrick D
Patrick Duggan
Dec 11, 20254 min read
Follow the Followers: Mapping GitHub Malware Distribution Networks
---
title: "Follow the Followers: Mapping GitHub Malware Distribution Networks"
slug: follow-the-followers-github-malware-network
date: 2025-12-10
author: Patri
Patrick Duggan
Dec 10, 20255 min read
First to Report: Pulsar RAT Distribution on GitHub
---
title: "First to Report: Pulsar RAT Distribution on GitHub - From Code to C2 in 14 Days"
slug: pulsar-rat-github-distribution-first-reporter
date: 2025-12-1
Patrick Duggan
Dec 10, 20255 min read
bottom of page