grep -r "threat-intel" ~/writeups

~/writeups/how-breach-numbers-get-inflated.md

Terminal verification script running a breach claim through checks, returning "not citable as fact yet — cite it as a claim"

How breach numbers get inflated

Sep 18, 2026 · 6 min read

"40 million records breached" is usually a claim wearing the costume of a fact. Five ways breach statistics inflate on the way to a headline, and a verification checklist for catching it before you cite one.

#threat-intel #breach-data #verification #osint

~/writeups/ifmis-bashe-claim-and-the-discipline-of-saying-only-whats.md

IFMIS 'Bashe' claim and the discipline of saying only what's proven

Jul 16, 2026 · 9 min read

In April 2026 the group APT73/Bashe listed Kenya's IFMIS on its leak site. This is what can actually be verified, what can't, how Kenya's response machinery works, and why the responsible telling stays inside the Data Protection Act.

#threat-intel #kenya #attribution #data-protection #ifmis

~/writeups/refactoring-in-the-dark-esdges-of-the-web-hunters-international-world-leaks-and-the-sectors-that-pay-for-it.md

Terminal-style genealogy tracing Hive to Hunters International to World Leaks to an unconfirmed next rebrand

Refactoring in the dark edges of the web.

Jul 4, 2026 · 10 min read

Tracing the Hive → Hunters International → World Leaks lineage, the encryption-less pivot, and why healthcare and education absorb the damage — with defanged sources and confidence-rated attribution.

#ransomware #threat-intel #attribution #healthcare #education