top of page

Security Tips
The Disclosure Hit November 9th. We Caught the Exploitation December 17th.
---
title: "We Watched Hackers Weaponize the Mintlify XSS in Real-Time (121 IOCs Captured)"
slug: mintlify-xss-downstream-exploitation-captured
date: 2025-12-19
Patrick Duggan
Dec 19, 20255 min read
The ME File Pattern: Why Reddit Thinks Claude Got Dumber (And How to Fix It)
Post-Opus 4, the complaints are everywhere:
- "Claude got dumber"
- "It's too cautious now"
- "It won't just DO things anymore"
- "It keeps asking permission fo
Patrick Duggan
Dec 14, 20254 min read
Hello, Is It Me You're Looking For? A Cautionary Tale About WordPress Honeypots
At 09:25 UTC on a quiet Saturday morning, our WordPress honeypot at analytics.dugganusa.com received a visitor from Frankfurt. Nothing unusual—we get dozens of
Patrick Duggan
Dec 14, 20253 min read
The Setup
---
title: "Hello, Is It Me You're Looking For? A Cautionary Tale About WordPress Honeypots"
date: 2025-12-14
author: Patrick Duggan
tags: [honeypot, threat-int
Patrick Duggan
Dec 14, 20253 min read
Return of the ANUSFRAGGER: Closing the China Cycle
---
title: "Return of the ANUSFRAGGER: Closing the China Cycle"
date: 2025-12-12
author: Patrick Duggan
tags: [pattern-38, china, anusfragger, threat-intelligen
Patrick Duggan
Dec 12, 20254 min read
Dear Huawei Cloud: Thanks for the 289 Requests, Here's 46 Blocks
---
title: "Dear Huawei Cloud: Thanks for the 289 Requests, Here's 46 Blocks"
date: 2025-12-12
author: Patrick Duggan
tags: [huawei, threat-intelligence, counte
Patrick Duggan
Dec 12, 20255 min read
Just Another Day Taking Out the Trash
---
title: "Six Assholes From Beijing: How Routine Trash Collection Caught a Sanctioned Military Company"
date: 2025-12-12
author: Patrick Duggan
tags: [threat-
Patrick Duggan
Dec 12, 20255 min read
The Receipts
---
title: "Who Are The Bad Guys Right Now? December 2025 Threat Landscape with Receipts"
slug: bad-guys-december-2025-threat-landscape
date: 2025-12-12
author:
Patrick Duggan
Dec 11, 20256 min read
The Numbers Don't Lie
---
title: "44% Original Threat Discoveries: Why Microsoft Is Polling Our Free Feed 214 Times a Week"
slug: stix-feed-quality-microsoft-polling
date: 2025-12-12
Patrick Duggan
Dec 11, 20254 min read
Integrating STIX/TAXII Threat Intelligence Feeds with Palo Alto Products: A Practical Guide
---
title: "Integrating STIX/TAXII Threat Intelligence Feeds with Palo Alto Products: A Practical Guide"
slug: stix-taxii-palo-alto-integration-guide
date: 2025
Patrick Duggan
Dec 11, 20257 min read
The Font is DEI Now: When Accessibility Becomes Political Theater
---
title: "The Font is DEI Now: When Accessibility Becomes Political Theater"
slug: dei-font-controversy-accessibility-first
date: 2025-12-10
author: Patrick D
Patrick Duggan
Dec 11, 20254 min read
Follow the Followers: Mapping GitHub Malware Distribution Networks
---
title: "Follow the Followers: Mapping GitHub Malware Distribution Networks"
slug: follow-the-followers-github-malware-network
date: 2025-12-10
author: Patri
Patrick Duggan
Dec 10, 20255 min read
First to Report: Pulsar RAT Distribution on GitHub
---
title: "First to Report: Pulsar RAT Distribution on GitHub - From Code to C2 in 14 Days"
slug: pulsar-rat-github-distribution-first-reporter
date: 2025-12-1
Patrick Duggan
Dec 10, 20255 min read
"Hackers LOVE Windows. Attackers HATE Azure!" - The Math Behind the Meme
"Hackers LOVE Windows. Attackers HATE Azure!" - The Math Behind the Meme
Patrick Duggan
Dec 9, 20256 min read
The Google Logo That Wasn't Google
---
title: "Brand Weaponization: They Stole Your Name and I Can Prove It"
slug: brand-weaponization-they-stole-your-name
date: 2025-12-09
author: Patrick Duggan
Patrick Duggan
Dec 9, 20255 min read
The Fnord in the Room: Why Every Security Professional Should Read Robert Anton Wilson
The Fnord in the Room: Why Every Security Professional Should Read Robert Anton Wilson
Patrick Duggan
Dec 8, 20257 min read
The Minority Report Problem
---
title: "PreCrime for Security: Why Judge Dredd is Our PreCog"
slug: precrime-security-judge-dredd-precog
date: 2025-12-08
author: Patrick Duggan
tags: [thre
Patrick Duggan
Dec 8, 20256 min read
The Morning Sweep
---
title: "9 Emails to GitHub Security: How a Minnesota Threat Hunter Found Novel C2s Before Breakfast"
slug: 9-emails-github-security-novel-c2
date: 2025-12-0
Patrick Duggan
Dec 8, 20253 min read
China 3%, Netherlands 26%: The Real Threat Landscape
---
title: "China 3%, Netherlands 26%: The Real Threat Landscape (Dec 7, 2025)"
excerpt: "CrowdStrike says FAMOUS CHOLLIMA. Palo Alto says RansomHub. Our firewa
Patrick Duggan
Dec 7, 20255 min read
The Vikings Came for Silver. We Send IOCs.
---
title: "Velkommen, Team Blue Denmark!"
slug: welcome-team-blue-denmark
date: 2025-12-07
author: Patrick Duggan
tags: [threat-intel, STIX, Denmark, community
Patrick Duggan
Dec 7, 20253 min read
bottom of page