Threat Intel2026-10-13
Defang and Refang: Handle hxxp and IOCs Correctly
Share defanged IOCs while retaining usable evidence: separate display, conversion, validation and submission to external services.
5 min read
Threat Intel2026-10-12
URL Normalization: Avoid Incorrect IOC Matches
Compare URLs while preserving evidence: case, encoding, parameters and fragments need explicit rules and tests for values that must stay distinct.
5 min read
Phishing2026-09-09
Suspicious URL? Check Redirects Without Opening It
Inspect a suspicious link, find previously observed redirects and protect private tokens before deciding whether to run an isolated scan.
6 min read
AI & ML2026-05-04
Security LLM and Agent Workflows: When (and How) to Check Malicious Domains, IPs, and URLs Before Acting
AI assistants in SOAR, IDEs, and browser extensions can exfiltrate data or run malicious code if they fetch the wrong link. This guide gives guardrails: schema for tool calls, policy tiers, and where threat intelligence checks belong in the loop.
5 min read