top of page

Security Opinions


Russia Turned Signal's QR Code Into a Wiretap — IOCs Inside
On March 20, 2026, the FBI, CISA, NSA, and allied agencies issued joint advisory PSA260320. The subject: Russia's SVR and FSB have developed a reliable...
Patrick Duggan
Apr 284 min read


Eight Vendor Blogs Pitched AI This Week. Here Is What They Buried.
I ran a sweep of the major security vendor blogs tonight. Unit 42, Check Point, Microsoft, SentinelOne, Recorded Future, Talos, ESET, Mandiant. Eight...
Patrick Duggan
Apr 278 min read


The Gap Isn't Data. It's Delivery. Why We Put 1 Million IOCs in Your Editor, Terminal, and Browser.
The threat intelligence market is $14.6 billion and growing. CrowdStrike charges $25 per endpoint per month. Recorded Future starts at $100,000 per year. Mandiant's pricing page says "contact sales," which is the enterprise way of saying "more than you want to spend." Ninety-five percent of organizations on earth cannot afford those prices. The small hospitals, the school districts, the municipalities, the startups, the managed service providers serving a hundred SMBs — they
Patrick Duggan
Apr 176 min read


Island Hopping With Drone Swarms: A $60 Sensor Node, a Solar Charging Pad, and Nimitz's Playbook
In 1943, Admiral Chester Nimitz faced a problem that every modern security architect would recognize: how do you project coverage across a vast area when each individual asset has limited range? His answer was island hopping — don't try to cover everything at once. Establish a base. Extend from it. Establish the next base just within reach of the first. Leap forward. Repeat. The supply chain becomes the territory. Eighty-three years later, the same topology solves a problem t
Patrick Duggan
Apr 178 min read


AI Hermeticism: The Emerald Tablet Describes Your AI Better Than Your Vendor Does
There is a text that's been in continuous circulation for at least 1,200 years. It's been translated from Arabic to Latin to Greek to English to every language humans use to think about ultimate things. Alchemists memorized it. Newton translated it by hand. Blavatsky built a religion around it. Physicists at Brookhaven smashed atoms in its shadow. The Emerald Tablet of Hermes Trismegistus. Seven principles. One paragraph. The foundational document of Hermeticism — the idea th
Patrick Duggan
Apr 177 min read


CrowdStrike Is Now Giving Advice on Windows Defender Vulnerabilities. Read That Again.
A disgruntled security researcher publicly dropped a privilege escalation zero-day in Microsoft Windows Defender this week. Microsoft patched it in April's Patch Tuesday. CISA added it to the KEV catalog. The vulnerability — CVE-2026-33825, nicknamed BlueHammer — allows local privilege escalation through the very software that's supposed to protect the endpoint. CrowdStrike published a Patch Tuesday analysis covering BlueHammer. Professional. Thorough. Technically accurate. A
Patrick Duggan
Apr 173 min read


CrowdStrike Wants to Warn You About OpenClaw. CrowdStrike Crashed 8.5 Million Machines.
CrowdStrike published a blog post this month titled "What Security Teams Need to Know About OpenClaw, the AI Super Agent." It's a well-written advisory. Professional tone. Specific CVE references. Actionable recommendations. It is also the most breathtaking act of corporate audacity in the history of cybersecurity. The Structural Question Nobody Is Asking Which is more dangerous to your enterprise: an open-source AI chatbot that your intern installed on their laptop, or a ker
Patrick Duggan
Apr 166 min read


Stop Stacking HATs: The AS/400 Was Right and Your Cyberdeck Is Wrong
The Pi community learned the wrong lesson from modularity. We looked at the 40-pin GPIO header, saw HATs clicking into place like Lego bricks, and decided that stacking four of them was the path to performance. UPS HAT on the bottom. M.2 HAT on top. Camera HAT above that. SDR HAT on top of that. Tower of power, cables stuffed between the layers, heat trapped in the middle, I/O fighting for attention on a shared bus. It works. Barely. And it's the exact architectural mistake t
Patrick Duggan
Apr 158 min read


Ripples in the Pond: 10 Signals Your Startup Has Real Interest (And How We Measure Ours)
Most startup advice about traction metrics is about what you can count. MRR. Signups. Churn. Conversion rate. DAU. The dashboards are beautiful. The numbers are precise. And if you're a seed-stage company selling to security professionals, intelligence analysts, and federal buyers — the numbers are almost entirely useless. Here's why: our audience doesn't run JavaScript. DugganUSA runs a threat intelligence platform. We serve a STIX feed to consumers in 46 countries. We publi
Patrick Duggan
Apr 155 min read


3I/ATLAS Just Parked at Jupiter's Gas Station. It's Carrying Fusion Fuel.
The Alcoholic Comet Nobody's Thinking About Correctly The headlines are cute. "Interstellar comet is exceptionally alcoholic." Scientific American, Space.com, Phys.org — all running the methanol angle like it's a frat party in the Oort Cloud. They're missing the story. 3I/ATLAS reached closest approach to Jupiter today — March 16, 2026 — at a distance of 53.6 million kilometers. That number matters. Jupiter's Hill radius — the gravitational boundary where Jupiter's pull domin
Patrick Duggan
Mar 164 min read


The Leech: How an Austrian Grad Student Built a Knockoff Epstein Search Engine on Our API
Justin Hangoebl, Master's student at Johannes Kepler University Linz. Built epstein-check.org in one day. Credits "DOJ Epstein Library" as his data source....
Patrick Duggan
Feb 214 min read
The Bodyguard: Igor Zinoviev and the Logistics of Jeffrey Epstein's Palm Beach Operation
Face crop extracted from DOJ evidence photo, page 6700. Machine identification failed. Human identification confirmed: Igor Zinoviev.
Patrick Duggan
Feb 215 min read
The Music Mogul: Tommy Mottola and the Friendship That Didn't Stop
Most of the figures in our Epstein Deep Dive series have one thing in common: their documented connections to Epstein cluster in the pre-conviction era,...
Patrick Duggan
Feb 216 min read
The Director's Cut: Brett Ratner and the Snow White Email
On evidence page 6983, our facial recognition system identified two faces. Face 2 was Brett Ratner at 90% confidence with a recognition score of 11.024 —...
Patrick Duggan
Feb 215 min read
The Baron and the Black Book: Peter Mandelson in the Epstein Files
When our facial recognition system processed 42,000 evidence photographs from the DOJ's Epstein document release, it identified Peter Mandelson on page 6935...
Patrick Duggan
Feb 216 min read
The Intellectual: Danny Hillis and the Salon That Wouldn't End
Danny Hillis built the Connection Machine. In the 1980s, while most computer scientists were still thinking in serial terms — one instruction, then the next...
Patrick Duggan
Feb 216 min read
The Science Advisor: Boris Nikolic and the Gateway to Gates
When Jeffrey Epstein died in a Manhattan jail cell on August 10, 2019, the world learned something that stunned even those who had been following the case...
Patrick Duggan
Feb 216 min read


The Neighbor: Richard Branson and the Island Next Door
Richard Branson does not appear in the Epstein evidence photo album. Google Cloud Vision found no facial match across 42,000 analyzed images. This is...
Patrick Duggan
Feb 216 min read
The Model Agent: Jean-Luc Brunel and the Emails They Cannot Unsend
Jean-Luc Brunel appeared in three separate evidence photographs. Page 6883 at 88% confidence with a score of 10.755. Page 6879 at 86%. Page 6878 at 71%....
Patrick Duggan
Feb 215 min read
The Money Man: Les Wexner and the Paper Trail That Won't Disappear
When Google Cloud Vision analyzed 42,000 evidence photographs from the Epstein DOJ release, it assigned Les Wexner the highest confidence score of any...
Patrick Duggan
Feb 215 min read
bottom of page