top of page



Cisco Paid. The Worst Week in Cybersecurity History Just Got a Final Chapter.
Cisco has been removed from ShinyHunters' dark web leak site. The listing that threatened to dump 3 million Salesforce records, 300 private GitHub repositories, AI product source code, and FBI/IRS/NASA customer data — gone. As of this morning, every other victim is still listed. Cisco is not. In the ransomware world, removal from a leak site means one thing: the victim paid. Cisco has not confirmed payment. They won't. But the $57 billion company that sells firewalls, intrusi
Patrick Duggan
Apr 34 min read


We Checked GitHub for Exploit Code Targeting the IRGC's Hit List. Nobody Else Is Looking.
Yesterday the IRGC named 18 American companies as military targets. Today we went hunting on GitHub for the exploit code that's already being staged against them. We found webshells disguised as security research. Full exploitation toolkits published the day before CISA deadlines. Java GUI "exploit tools" committed with debug logs. And nobody paying attention. This is the wasteland. The space between a CVE disclosure and a patch deployment where attackers stage their tools in
Patrick Duggan
Apr 24 min read
398,525 Documents. 14 Statues. 3 Arrested.
title: "MEDUSTONE: This Is How You Crowdsource Accountability"
Patrick Duggan
Feb 276 min read
Dear DOJ: Here's Our GSA Schedule Rate
We are a registered government contractor. SAM.gov. D-U-N-S number. UEI. Minnesota LLC. The paperwork is clean.
Patrick Duggan
Feb 275 min read
The 91 Smoking Guns: Every Explosive Document in the Epstein Files, Ranked
We've spent three weeks indexing 364,000+ DOJ Epstein documents. We published seven deep dives — Trump, Clinton, Putin, Israel, MBS, Silicon Valley, and the...
Patrick Duggan
Feb 2219 min read
bottom of page