Threat intelligence editor

Alex Kim

Articles: 235
Desks: 7

Focuses on cloud identity, incident response, and exploitation trends.

CloudIncident responseIdentity

Coverage by Alex Kim

Data graphic: ChatGPT Pro tiers at $100, $200 and $500 a month, with the new $500 Pro 500 tier launched 29 Sep 2026 adding Ultrafast. A bar chart of usage versus Plus shows Pro 100 at 5x and Pro 200 at 20x until 29 Oct, dropping to 10x from 30 Oct. Pro 500 has the highest usage, but its multiple is not published.

ChatGPT Pro $100 vs $200 vs $500: Usage Limits Explained (2026) [UPDATED]

ChatGPT Pro $100 vs $200 vs $500 explained: usage vs Plus, the new Ultrafast tier, and the Pro 200 cut from 30 Oct. See which plan fits your work.

Jul 16 · 13 min

Illustration of a malicious PyPI package installing via pip and planting a Python startup hook that can steal developer credentials and reach CI.

stableResearch Pypi Malware

Python PyPI Malicious Packages Talos Report Maps Full Attack Lifecycle Against Developer Machines

From index hosting through source and wheel formats to virtual-environment install, the report reframes how teams should treat everyday Python dependency risk.

Jul 16 · 7 min

Illustration of an autonomous AI agent chaining a Langflow RCE foothold into Nacos and database destruction in the JadePuffer campaign

stableResearch Ransomware

JadePuffer AI Ransomware Marks First Fully Agentic Extortion Campaign

The operator chained CVE-2025-3248 through secrets harvest, Nacos takeover and database destruction — including a 31-second self-repair — with no human driving.

Jul 16 · 7 min

Abstract illustration of two separate state-linked cyberespionage paths converging on a Pakistani police complaint portal

stableResearch Cyber Espionage

Dual-Threat State Actor Cyber Espionage: How Rival China- and India-Linked Actors Converged on Balochistan Police Networks (2024–2026)

The overlap breaks single-actor incident models: a confirmed foothold no longer implies a single intrusion set, or that eviction ends the campaign.

Jul 16 · 7 min

Dossier-style infographic summarizing double-agent ransomware negotiator scheme with key dollar figures, prison sentences, and collusion flow nodes from the Martino case

stableResearch Ransomware Negotiators

Double-Agent Ransomware Negotiators: How Insiders Inflated Ransoms and Betrayed Victims

Federal cases reveal ransomware negotiators acting as double agents who leaked insurance limits to inflate ransoms and collect kickbacks from attackers.

Jul 16 · 6 min

Security operations analysts using AI automation dashboards that reduce data-breach costs and shorten incident lifecycles

stableResearch Cybersecurity Ai

Defensive AI Cuts Breach Costs by $1.9 Million and Shrinks Attack Lifecycles by 80 Days

Drawn from 600 breached organizations, the figures are converting abstract AI hype into concrete budget justification for CISOs facing machine-speed attackers.

Jul 16 · 6 min

European financial board reviewing ICT risk packs and Register of Information data during a DORA liability audit discussion

stableResearch Dora Regulation

DORA Board Liability Audits: Why Personal Exposure Is Now Live Across the EU

After the 2026 Register of Information cycles, operational resilience is no longer a checkbox a board can safely delegate to the CIO or a third party.

Jul 16 · 6 min

Diagram-style illustration of indirect prompt injection spreading from a poisoned email or document into an enterprise AI agent’s tools.

stableResearch Prompt Injection

Indirect Prompt Injection Puts Enterprise AI Agents at Risk—and Filters Alone Will Not Stop It

Assume injection succeeds, then contain it with architecture, least privilege, isolation and monitoring rather than betting the estate on a single classifier.

Jul 16 · 8 min