Threat intelligence, case studies, and security research from the Intruex team.
DragonForce built the first malware using Microsoft Teams TURN relay for command-and-control. Why the C2 channel passes network inspection — and why cross-telemetry correlation is the only way to catch it.
Two Chinese state-sponsored campaigns with five-year dwell times inside US critical infrastructure and every major US telecom. The alerts fired — the investigation didn’t happen.
Ransomware operators are shutting down trauma centers, paralyzing city governments, and disrupting medical device supply chains. An analysis of four early-2026 attacks and why traditional SOC models can’t contain them before detonation.
What each security operations technology actually does, where they overlap, and how to choose the right combination for your organization.
A single attacker used a $20/month AI subscription to breach 9 government agencies and exfiltrate 150GB of sensitive data. We break down every phase and show where AI-powered SOC detection would have intervened.
Learn how Intruex automatically correlates related security alerts into unified attack campaigns, maps them to MITRE ATT&CK kill chain phases, and generates analyst-ready narratives.
What to look for when evaluating AI-powered SOC platforms. Covers agent architecture, deployment flexibility, compliance mapping, and the difference between AI-assisted and AI-autonomous operations.
How Intruex delivers the same AI-powered security operations in fully disconnected networks using self-hosted LLMs and local inference — no cloud dependency required.
Want to see how AI-powered SOC operations detect threats that traditional tools miss? Let's talk.