Josh Shepard

Josh Shepard

Josh has spent his career hunting for and neutralizing nation-state threat actors targeting critical infrastructure. During his time with the USAF, he led a team of threat hunters pursuing advanced persistent threats (APTs) targeting the defense industrial base, energy, transportation, and water/wastewater sectors. From there he transitioned to Ro, a startup in the healthcare sector, where he built and led a threat intelligence and threat hunt program operating on a multi-cloud, multi-operating system environment.

We identify ways hackers leverage everyday websites and tools to build a picture of a target organization they can use to gain initial access.

Threat Hunting and Intelligence

Big Brother Hacker - Attack Reconnaissance

Jun 05, 2024 5 min read

MITRE ATLAS is a globally accessible, living knowledge base of adversary tactics and techniques against Al-enabled systems based on real-world attack observations and realistic demonstrations from Al-red teams and security groups.

Threat Hunting and Intelligence

Navigating Skynet with MITRE ATLAS

May 20, 2024 2 min read

RADICL has recently seen an uptick in threat actors using open redirect vulnerabilities in legitimate websites to hide their phishing links.

Attack Surface and Vulnerability Management

Master of Disguise 2: The Art of Redirection

May 09, 2024 2 min read

Seemingly innocent URLs can be hiding cybersecurity threats.

Attack Surface and Vulnerability Management

Master of Disguise: URL Edition

Apr 18, 2024 5 min read

RADICL has observed an ongoing phishing campaign with the intent to steal a victim’s credit card information and other personal data such as email and physical address.

Threat Hunting and Intelligence

Cloudy With a Chance of Credit Card Theft

Mar 07, 2024 3 min read

Attack Surface and Vulnerability Management

From Zero to One: A Threat Hunting Training Montage (Part 1)

Jan 11, 2024 3 min read

Load More Stories

Regulatory Compliance

The Complete Guide to NIST CSF: What It Is, the Six Functions Explained, and How to Implement It

Oct 01, 2026 9 min read

Regulatory Compliance

What Is FedRAMP? Cloud Authorization for Government Contractors

Sep 23, 2026 5 min read

JohnE Mullin is the Director of IT at Trenton Systems, who passed their CMMC assessment after working with RADICL.

Regulatory Compliance

How a 2-Person IT Team Passed CMMC and Won Their Biggest Contract Ever

Sep 10, 2026 16 min read

Threat Hunting and Intelligence

What Is Password Spraying? Low-and-Slow Account Compromise

Oct 05, 2026 5 min read

Threat Hunting and Intelligence

What is Adversary-in-the-Middle (AiTM)? Session Hijacking at Scale

Oct 05, 2026 8 min read

Threat Hunting and Intelligence

That Voter Registration Website Might Want More Than Your Vote

Sep 29, 2026 5 min read

Industry Analysis

Internal Tool Gets Body Double

Oct 02, 2026 3 min read

Industry Analysis

Nigerian Princes, Free iPads, and the Evolution of Social Engineering

Sep 29, 2026 4 min read

Industry Analysis

Token Taken, Trust Shaken

Sep 18, 2026 4 min read

Incident Response

What Are Incident Response Solutions?

Apr 13, 2026 7 min read

On the evening of 7/25/24, CrowdStrike pushed a content update which caused Windows systems to crash and/or enter a reboot loop, rendering the systems unusable.

Incident Response

A Day in the Life: Our vSOC Responds to the CrowdStrike Incident

Jul 24, 2024 2 min read

Ransoming an espionage victim carries several advantages that can make it an ideal move for nation-state threat actors.

Incident Response

I Spy a Ransomware Attack

Jul 16, 2024 2 min read

There was a joint advisory this week (AA26-097A) warning of active exploitation of internet-facing Programmable Logic Controllers (PLCs).

Attack Surface and Vulnerability Management

Iranian APT Actors Are Targeting Your PLCs — Here's What to Do

Apr 09, 2026 2 min read

Attack Surface and Vulnerability Management

CMMC Enclave: What It Is, When It Works, and How to Build the Right Compliance Boundary

Mar 26, 2026 11 min read

Attack Surface and Vulnerability Management

EP 9 - Palo Alto Networks' Daryan Dehghanpisheh on Vulnerability Management

Jan 23, 2026 1 min read

Security Operations & vSOC

Cloaking Gate Fronts a Certutil Stager Deploying ScreenConnect

Sep 30, 2026 10 min read

Security Operations & vSOC

MDR vs. MSSP vs. vSOC: What's the Difference?

Sep 09, 2026 4 min read

Security Operations & vSOC

SOC Cost in 2026: What It Costs to Build vs Outsource a 24/7 Security Operations Center

Jul 13, 2026 7 min read

DIB Innovators

EP 57 - Cyber Resilience at the Crossroads

Apr 10, 2025 2 min read

Micro-Ant's Charles McCarrick on Innovation and Opportunity in the DIB

DIB Innovators

EP 1 - Micro-Ant's Charles McCarrick on Innovation and Opportunity in the DIB

Dec 08, 2023 2 min read

DIB Innovators

EP 124 — Asylon's Damon Henry On How Selling Outcomes Instead Of Robots Changes Defense Acquisition

Oct 08, 2026 1 min read

DIB Innovators

EP 123 — Overmatch Ventures' Morgan Hitzig On The Founder Offset And Why America Wins By Playing Its Own Game

Oct 01, 2026 1 min read

DIB Innovators

EP 122 — AEVEX's Manan Patel On The Modular Drone Strategy That Won Army Launched Effects-Short Range (LE-SR)

Sep 24, 2026 1 min read