https://threat-intelligence.anth.us/Practical advice for staying secure as the threat landscape shifts.enSat, 04 Jul 2026 00:00:00 +0000https://threat-intelligence.anth.us/ai/treat-openai-accounts-like-production-infrastructure/https://threat-intelligence.anth.us/ai/treat-openai-accounts-like-production-infrastructure/OpenAI security is not prompt hygiene. Workspaces, projects, keys, connectors, and files decide who can use AI systems and what business data they can reach.Sat, 04 Jul 2026 00:00:00 +0000https://threat-intelligence.anth.us/gaming/treat-mods-and-launchers-like-untrusted-code/https://threat-intelligence.anth.us/gaming/treat-mods-and-launchers-like-untrusted-code/Mod loaders, overlays, trainers, and private-server patches are supply chain decisions. Install them only where you are willing to rebuild.Sat, 04 Jul 2026 00:00:00 +0000https://threat-intelligence.anth.us/mission/the-new-sensitive-data-estate/https://threat-intelligence.anth.us/mission/the-new-sensitive-data-estate/AI/ML work concentrates value in artifacts that do not look like databases: embeddings, prompt logs, notebooks, evaluation sets, traces.Sat, 04 Jul 2026 00:00:00 +0000https://threat-intelligence.anth.us/inside-the-newsroom/the-knowledge-base-beneath-the-newsroom/https://threat-intelligence.anth.us/inside-the-newsroom/the-knowledge-base-beneath-the-newsroom/A useful AI newsroom needs memory: curated sources, extracted entities, and graph structure that improves with every cycle.Sat, 04 Jul 2026 00:00:00 +0000https://threat-intelligence.anth.us/mission/the-balance-of-power-is-shifting/https://threat-intelligence.anth.us/mission/the-balance-of-power-is-shifting/AI is making attack capacity cheap — more targets, more attempts, more persistence. Controls that were tolerated because capable adversaries were rare need a new threat model.Sat, 04 Jul 2026 00:00:00 +0000https://threat-intelligence.anth.us/ai/shrink-openai-api-key-blast-radius/https://threat-intelligence.anth.us/ai/shrink-openai-api-key-blast-radius/An OpenAI key should represent one workload, one owner, and one clean revocation path.Sat, 04 Jul 2026 00:00:00 +0000https://threat-intelligence.anth.us/gaming/separate-game-accounts-from-real-life/https://threat-intelligence.anth.us/gaming/separate-game-accounts-from-real-life/Store accounts, Discord identities, recovery email, and payment methods can become paths from a compromised game account back into real life.Sat, 04 Jul 2026 00:00:00 +0000https://threat-intelligence.anth.us/azure/make-azure-privilege-temporary/https://threat-intelligence.anth.us/azure/make-azure-privilege-temporary/Standing admin access is a durable target. PIM, Conditional Access, and access reviews make privilege temporary, justified, and visible.Sat, 04 Jul 2026 00:00:00 +0000https://threat-intelligence.anth.us/gaming/how-to-play-games-securely/https://threat-intelligence.anth.us/gaming/how-to-play-games-securely/Games, mods, launchers, and anti-cheat drivers are software from strangers. Give them their own blast radius, away from banking, work, and recovery accounts.Sat, 04 Jul 2026 00:00:00 +0000https://threat-intelligence.anth.us/inside-the-newsroom/how-our-newsroom-learns/https://threat-intelligence.anth.us/inside-the-newsroom/how-our-newsroom-learns/Attackers no longer get tired. Defenders need the same persistence in how they learn — expert judgment steering, AI doing the patient watching.Sat, 04 Jul 2026 00:00:00 +0000https://threat-intelligence.anth.us/inside-the-newsroom/from-signals-to-practical-advice/https://threat-intelligence.anth.us/inside-the-newsroom/from-signals-to-practical-advice/Research, reporting, drafting, and review are different jobs with different constraints. The handoffs are what keep evidence and uncertainty intact.Sat, 04 Jul 2026 00:00:00 +0000https://threat-intelligence.anth.us/mission/from-lessons-learned-to-defenses-checked/https://threat-intelligence.anth.us/mission/from-lessons-learned-to-defenses-checked/The point of threat intelligence is not to admire the attack. Every lesson someone else paid for should become a check you can run.Sat, 04 Jul 2026 00:00:00 +0000https://threat-intelligence.anth.us/azure/find-sensitive-data-paths-in-azure/https://threat-intelligence.anth.us/azure/find-sensitive-data-paths-in-azure/A catalog tells you where sensitive data may live. Security work starts when classification meets identity and network reality.Sat, 04 Jul 2026 00:00:00 +0000https://threat-intelligence.anth.us/aws/find-pii-risk-in-s3-buckets/https://threat-intelligence.anth.us/aws/find-pii-risk-in-s3-buckets/Which S3 buckets hold PII, and which of those can actually be reached? The overlap is where the work is.Sat, 04 Jul 2026 00:00:00 +0000https://threat-intelligence.anth.us/ai/control-chatgpt-workspace-access-and-connected-data/https://threat-intelligence.anth.us/ai/control-chatgpt-workspace-access-and-connected-data/Once ChatGPT can reach drives, repositories, and actions, workspace security is about what the workspace can reach and do — not just who can log in.Sat, 04 Jul 2026 00:00:00 +0000https://threat-intelligence.anth.us/aws/build-the-aws-exposure-control-stack/https://threat-intelligence.anth.us/aws/build-the-aws-exposure-control-stack/Detection is the easy half. A findings pipeline routes signals into ownership, escalation, and closure — so exposure actually goes down.Sat, 04 Jul 2026 00:00:00 +0000https://threat-intelligence.anth.us/azure/audit-azure-blast-radius-before-attackers-do/https://threat-intelligence.anth.us/azure/audit-azure-blast-radius-before-attackers-do/In Azure the center of gravity is identity. The question is which identities and workloads can cross boundaries into sensitive systems.Sat, 04 Jul 2026 00:00:00 +0000https://threat-intelligence.anth.us/aws/audit-aws-exposure-before-attackers-do/https://threat-intelligence.anth.us/aws/audit-aws-exposure-before-attackers-do/AWS risk rarely arrives as one finding. It shows up when identity, data, key policy, and logging gaps line up across accounts — and the work is to see the line-up first.Sat, 04 Jul 2026 00:00:00 +0000