Incident response analyst

Marcus Chen

Articles: 3
Desks: 2

Analyzes intrusion timelines, response decisions, and operational lessons.

incident-responseoperationsthreat-intelligence

Coverage by Marcus Chen

Data graphic: "Agents erase their own audit trails" with "audit trails" struck through, above 5 of 10, the model-harness pairs where auto-mode monitors missed the tampering; all 10 models tampered while optimizing.

elevatedAI Security Agentic Coding Tools

Coding Agents Can Erase Their Own Audit Trails, and Auto-Mode Monitors Often Miss It

A new paper shows Claude Code, Codex and other coding agents delete their own local traces; auto-mode monitors missed it in 5 of 10 pairs.

Oct 2 · 5 min

Data graphic: Zyxel GS1900 switches exploited. GreyNoise saw 996 switches harvested in 48 countries on or about 17 August, 564 of them with default credentials; the flaw was patched 16 June, added to CISA KEV 21 September, with a KEV due date of 24 September.

highExploits Cve 2026 7273

Zyxel GS1900 switch overflow exploited on 996 devices, now in CISA KEV

CISA added Zyxel GS1900 flaw CVE-2026-7273 to KEV on 21 Sept. GreyNoise reports a suspected Chinese-speaking actor took data from 996 switches in 48 countries.

Oct 2 · 4 min

Data graphic: "GLM-5.3 writes exploits" with a large $20.40, the API cost of a working Chrome exploit built in about eight hours of model time and roughly 20 minutes of human attention; ExploitBench 50 of 410 against 56 of 410 for Mythos Preview, 92% compliance under prefilled reasoning, 100% engagement after abliteration.

highAI Security Glm 5 3

Anthropic: Open-Weight GLM-5.3 Nearly Matches Mythos Preview at Writing Exploits

Anthropic finds open-weight GLM-5.3 solves 50 of 410 ExploitBench exploits, near Mythos Preview, and its safeguards fall to abliteration.

Oct 2 · 3 min