top of page
We Checked GitHub for Exploit Code Targeting the IRGC's Hit List. Nobody Else Is Looking.
Yesterday the IRGC named 18 American companies as military targets. Today we went hunting on GitHub for the exploit code that's already being staged against them. We found webshells disguised as security research. Full exploitation toolkits published the day before CISA deadlines. Java GUI "exploit tools" committed with debug logs. And nobody paying attention. This is the wasteland. The space between a CVE disclosure and a patch deployment where attackers stage their tools in
Patrick Duggan
Apr 24 min read
"I Designed the DJT Business Comeback": What 1,104 DOJ Documents Reveal About Trump and Epstein
The DOJ removed a photo of Howard Lutnick from the Epstein files today. We already had it. We also have 1,103 other documents they'd rather you didn't search.
Patrick Duggan
Feb 278 min read
The Power of Cross-Indexing: How 37 Indexes Exposed What Single-Source Searches Can't
One name. Thirty-seven indexes. 10.9 million documents. The connections only appear when you search everything at once.
Patrick Duggan
Feb 277 min read
"I Designed the DJT Business Comeback": What 1,104 DOJ Documents Reveal About Trump and Epstein
The DOJ removed a photo of Howard Lutnick from the Epstein files today. We already had it. We also have 1,103 other documents they'd rather you didn't search.
Patrick Duggan
Feb 277 min read
The 91 Smoking Guns: Every Explosive Document in the Epstein Files, Ranked
We've spent three weeks indexing 364,000+ DOJ Epstein documents. We published seven deep dives — Trump, Clinton, Putin, Israel, MBS, Silicon Valley, and the...
Patrick Duggan
Feb 2219 min read
The Epstein Files: Connecting the Dots
The Epstein Files: Connecting the Dots
Patrick Duggan
Jan 305 min read
I Politely Disagree: This Is OUR Fucking City, Not Yours, Commander Bovino
The Man Who Claimed Los Angeles, Chicago, and Now Minneapolis Has a Pattern. We Have Receipts.
Patrick Duggan
Jan 294 min read
We Don't Discover Threats. We Prove We Can Reproduce What Enterprise Systems Detect. (And That's Better.)
We Don't Discover Threats. We Prove We Can Reproduce What Enterprise Systems Detect. (And That's Better.)
Patrick Duggan
Nov 22, 20256 min read
BUTTERBOT: The Netflix Pitch (Or: How I Realized I'm The Product)
BUTTERBOT: The Netflix Pitch (Or: How I Realized I'm The Product)
Patrick Duggan
Nov 7, 20259 min read
The $75 Security Company That Microsoft Built (For $20 Billion)
The $75 Security Company That Microsoft Built (For $20 Billion)
Patrick Duggan
Nov 6, 20255 min read
The $75 Security Company That Microsoft Built (For $20 Billion)
The $75 Security Company That Microsoft Built (For $20 Billion)
Patrick Duggan
Nov 6, 20255 min read
The $75 Security Company That Microsoft Built (For $20 Billion)
The $75 Security Company That Microsoft Built (For $20 Billion)
Patrick Duggan
Nov 6, 20255 min read
The $75 Security Company That Microsoft Built (For $20 Billion)
The $75 Security Company That Microsoft Built (For $20 Billion)
Patrick Duggan
Nov 6, 20255 min read
The $75 Security Company That Microsoft Built (For $20 Billion)
The $75 Security Company That Microsoft Built (For $20 Billion)
Patrick Duggan
Nov 6, 20255 min read
The $75 Security Company That Microsoft Built (For $20 Billion)
The $75 Security Company That Microsoft Built (For $20 Billion)
Patrick Duggan
Nov 6, 20255 min read
Multi-Dimensional Threat Intelligence Analysis: Looking for AI Adversaries (Nov 2025)
Multi-Dimensional Threat Intelligence Analysis: Looking for AI Adversaries (Nov 2025)
Patrick Duggan
Nov 6, 202523 min read
We Found 5 Threat Actors Hiding in Our Hall of Shame (And Show You How to Find Yours)
We Found 5 Threat Actors Hiding in Our Hall of Shame (And Show You How to Find Yours)
Patrick Duggan
Nov 2, 20257 min read
Why Google's Containerization Philosophy Saved Us (Before We Even Knew It)
Why Google's Containerization Philosophy Saved Us (Before We Even Knew It)
Patrick Duggan
Oct 29, 20258 min read
We Scanned 81 IPs Yesterday. All 7 Netherlands IPs Were Malicious. Every. Single. One.
We Scanned 81 IPs Yesterday. All 7 Netherlands IPs Were Malicious. Every. Single. One.
Patrick Duggan
Oct 27, 20255 min read
We Built a $2.8M Threat Intel Platform in 115MB (The Microservices Equivalent of a Single Floppy)
We Built a $2.8M Threat Intel Platform in 115MB (The Microservices Equivalent of a Single Floppy)
Patrick Duggan
Oct 27, 20257 min read
bottom of page