Dylan Haase

Dylan Haase

Dylan spent his early career in military intelligence before earning a computer science degree from the Colorado School of Mines. He's drawn to the full picture of how attackers operate and how defenders catch them. He brings blue team expertise to RADICL as a SOC Analyst defending Defense Industrial Base contractors, while pursuing red team skills on his own time — pairing both perspectives into a well-rounded security skill set.

Posts by Dylan Haase
Trojanized ArcGIS Installer Drops Dual-Channel RAT
On May 18, 2026, RADICL observed an intrusion on a Windows endpoint originating from a trojanized ArcGIS Pro installer downloaded from a typosquatted domain.

Trojanized ArcGIS Installer Drops Dual-Channel RAT

May 28, 2026 8 min read

THE DIB CYBERSECURITY MATURITY REPORT 2025 EDITION

Read Full Report
RADICL_ DIB Report_Part 5

Regulatory Compliance

Read More  
What is SPRS? How Defense Contractors Are Scored on Cybersecurity
Beyond contracting officers and primes, your SPRS score is on file with the federal government. If a cyber incident occurs and DoD investigators are examining your compliance history, your SPRS submission is part of the record.

What is SPRS? How Defense Contractors Are Scored on Cybersecurity

May 26, 2026 8 min read
What is DFARS 252.204-7012? A Guide for Defense Contractors

What is DFARS 252.204-7012? A Guide for Defense Contractors

May 14, 2026 8 min read
CMMC Compliance Deadline 2026: Key Dates That Affect Your DoD Contract

CMMC Compliance Deadline 2026: Key Dates That Affect Your DoD Contract

Apr 13, 2026 6 min read

Threat Hunting & Intelligence

Read More  
Trojanized ArcGIS Installer Drops Dual-Channel RAT
On May 18, 2026, RADICL observed an intrusion on a Windows endpoint originating from a trojanized ArcGIS Pro installer downloaded from a typosquatted domain.

Trojanized ArcGIS Installer Drops Dual-Channel RAT

May 28, 2026 8 min read
Multi‑Stage VBScript Malware Analysis
This is a detailed breakdown of a malicious VBS script discovered on an endpoint within RADICL’s customer base as a result of RADICL’s custom EDR detection logic. The script executes a multi-stage attack designed to achieve persistence, evade detection, and deploy a secondary payload.

Multi‑Stage VBScript Malware Analysis

Jul 23, 2025 7 min read
Unmasking the Toy Maker Initial Access Broker
An initial access broker is a type of threat actor specializing in gaining initial persistent access to an environment.

Unmasking the Toy Maker Initial Access Broker

May 20, 2025 2 min read

Industry Analysis

Read More  
Havoc AI: CMMC Level 2 Compliance with a Team That Actually Cares
In this testimonial, Caitlin talks about what it's really like working with the RADICL team day-to-day: the responsiveness, the depth of expertise, and the honest guidance that keeps clients on the right track, even when that means redirecting internal efforts.

Havoc AI: CMMC Level 2 Compliance with a Team That Actually Cares

Apr 30, 2026 3 min read
David Dickey on Scaling Defense Tech Hiring

David Dickey on Scaling Defense Tech Hiring

Apr 30, 2026 1 min read
Jonathan Slavik on Payload Handoffs in Hours, Not Months

Jonathan Slavik on Payload Handoffs in Hours, Not Months

Apr 23, 2026 1 min read

Incident Response

Read More  
What Are Incident Response Solutions?

What Are Incident Response Solutions?

Apr 13, 2026 7 min read
A Day in the Life: Our vSOC Responds to the CrowdStrike Incident
On the evening of 7/25/24, CrowdStrike pushed a content update which caused Windows systems to crash and/or enter a reboot loop, rendering the systems unusable.

A Day in the Life: Our vSOC Responds to the CrowdStrike Incident

Jul 24, 2024 2 min read
I Spy a Ransomware Attack
Ransoming an espionage victim carries several advantages that can make it an ideal move for nation-state threat actors.

I Spy a Ransomware Attack

Jul 16, 2024 2 min read

Attack Surface & Vulnerability Management

Read More  
Iranian APT Actors Are Targeting Your PLCs — Here's What to Do
There was a joint advisory this week (AA26-097A) warning of active exploitation of internet-facing Programmable Logic Controllers (PLCs).

Iranian APT Actors Are Targeting Your PLCs — Here's What to Do

Apr 09, 2026 2 min read
CMMC Enclave: What It Is, When It Works, and How to Build the Right Compliance Boundary

CMMC Enclave: What It Is, When It Works, and How to Build the Right Compliance Boundary

Mar 26, 2026 11 min read
Daryan Dehghanpisheh on Extending Vulnerability Management to AI

Daryan Dehghanpisheh on Extending Vulnerability Management to AI

Jan 23, 2026 1 min read

Security Operations & vSOC

Read More  
Top SOC Service Providers (SOCaaS) for 2026

Top SOC Service Providers (SOCaaS) for 2026

Mar 26, 2026 11 min read
Best MDR Providers for Regulated Industry & DIB Contractors (2026)

Best MDR Providers for Regulated Industry & DIB Contractors (2026)

Mar 12, 2026 16 min read

Operational Resilience

Read More  
Cyber Resilience at the Crossroads

Cyber Resilience at the Crossroads

Apr 10, 2025 2 min read
Ep 1: Charles McCarrick on Innovation and Opportunity in the DIB
Micro-Ant's Charles McCarrick on Innovation and Opportunity in the DIB

Ep 1: Charles McCarrick on Innovation and Opportunity in the DIB

Dec 08, 2023 2 min read

The DIB Innovators

Celebrating the brilliant minds driving innovation in the Defense Industrial Base. Join host David Graff as he speaks with DIB leaders championing our nation’s security and shaping the future of defense technology.

EP 99 — AI Strategy Corporation's David Mroczka On Cutting U.S. Army Tech Scouting From 12 Months To 2 Weeks

EP 99 — AI Strategy Corporation's David Mroczka On Cutting U.S. Army Tech Scouting From 12 Months To 2 Weeks

May 28, 2026 1 min read
EP 98 — AimLock's Bryan Bockmon on Keeping Humans in the Kill Decision While Automating the Rest

EP 98 — AimLock's Bryan Bockmon on Keeping Humans in the Kill Decision While Automating the Rest

May 21, 2026 1 min read
EP 97 — Teague's Matt McElvogue on Why Operators Stop Trusting the Tech & Start Working Around It

EP 97 — Teague's Matt McElvogue on Why Operators Stop Trusting the Tech & Start Working Around It

May 12, 2026 1 min read