Opens in a new tab

Active breach? 24/7 Ninjas at Night hotline · (208) 283-7010

Insights

Threat intelligence from the Ninjas.

Field notes, threat analysis and practical remediation from the operators who track these actors daily — written to move you from reactive to proactive.

Latest insights

Recent analysis & field notes.

0x4D5A
November 26, 2025

CTI Threat Hunting

Proactively threat hunting in your organization is an essential function to continually reduce risk. Today we have cultural and CRINK nation influences that have introduced…
READ MORE
0x4D5A
October 13, 2025

Warlock Ransomware Warpath

Precision Blitzkrieg Warlock ransomware (aka Storm 2603, Warlock Dark Army, GOLD SALEM, FIN11, TA505, Dungeon Spider, UNC902) emerged in the wild March 2025 and has…
READ MORE
0x4D5A
October 7, 2025

Is Automated Pen Testing for Me?

Leading a global penetration testing practice several years ago I found that most organizations that planned their needs last minute were meeting compliance that they…
READ MORE
0x4D5A
June 9, 2025

Model Context Protocol (MCP) – Transformative AI Tech with Risk

Model Context Protocol (MCP) is transformative for artificial intelligence (AI), standardizing and creating context for a Large Language Model (LLM) to interact with external tools…
READ MORE
0x4D5A
July 15, 2024

Right Person – Right Role

I pulled the wrench to the left and it slipped off the head and I wracked my knuckles, pulling the skin off two fingers. I…
READ MORE
0x4D5A
May 1, 2024

Alert Angina

Have we moved from "drowning in data" to "Alert Angina"? I fear (pun intended) we are so overwhelmed with alerts, emails, and the 'noise' of…
READ MORE
0x4D5A
October 31, 2023

Trusting AI – Can We?

John asks an online artificial intelligence (AI) tool for advice and it generates an answer, but can you TRUST the answer? How do you know…
READ MORE
0x4D5A
October 31, 2023

Cyber Threat Intelligence Actionability

How is actionability achieved leveraging your blue team operations within IT, security teams, and CTI? HINT: It's not a tool! CTI “Actionability” is a marketing…
READ MORE
0x4D5A
October 19, 2023

Cybersecurity maturity – where are you at?

The threat of the unknown is real? You may think you have a well managed network until you discover, from a breach, that you've been…
READ MORE
0x4D5A
October 12, 2023

Naming of 4D5A Security

We often get asked, how did you name 4D5A Security? It's named after a Windows executable. If you're a programmer or a malware analyst you're…
READ MORE
0x4D5A
October 12, 2023

Culture Bias in the Workplace

I'm at work on a conference call, working from home as an American doing work with several colleagues from several different countries and cultures from…
READ MORE