Let's Talk
Let's Talk
All TopicsDIB InnovatorsPodcastIndustry AnalysisThreat Hunting and IntelligenceRegulatory ComplianceAttack Surface and Vulnerability ManagementCMMCZero Gravity SummitGeneralCompanySecurity Operations & vSOCTestimonialsFounderIncident ResponseManaged Security OperationsOperational ResilienceSignal & NoiseThreat Management
One Email, Five Layers: Anatomy of an AiTM Phishing Kill Chain
Threat Hunting and Intelligence

One Email, Five Layers: Anatomy of an AiTM Phishing Kill Chain

Jul 16, 2026 7 min read
Ransomware Gang or IT Admin?
PowerShell script used deliberate attempts to bypass CrowdStrike EDR using native BitLocker encryption and vssadmin shadow copy deletion.
Threat Hunting and Intelligence

Ransomware Gang or IT Admin?

Jun 24, 2026 3 min read
Trojanized ArcGIS Installer Drops Dual-Channel RAT
On May 18, 2026, RADICL observed an intrusion on a Windows endpoint originating from a trojanized ArcGIS Pro installer downloaded from a typosquatted domain.
Threat Hunting and Intelligence

Trojanized ArcGIS Installer Drops Dual-Channel RAT

May 28, 2026 8 min read
Multi‑Stage VBScript Malware Analysis
This is a detailed breakdown of a malicious VBS script discovered on an endpoint within RADICL’s customer base as a result of RADICL’s custom EDR detection logic. The script executes a multi-stage attack designed to achieve persistence, evade detection, and deploy a secondary payload.
Threat Hunting and Intelligence

Multi‑Stage VBScript Malware Analysis

Jul 23, 2025 7 min read
Unmasking the Toy Maker Initial Access Broker
An initial access broker is a type of threat actor specializing in gaining initial persistent access to an environment.
Threat Hunting and Intelligence

Unmasking the Toy Maker Initial Access Broker

May 20, 2025 2 min read
Too Good To Be True
In this campaign, Lazarus Group tricks a user into running a malicious script on their machine by having them apply for a job that is just a little too good to be true.
Threat Hunting and Intelligence

Too Good To Be True

May 01, 2025 3 min read
Load More Stories
 

THE DIB CYBERSECURITY MATURITY REPORT 2025 EDITION

Read Full Report
RADICL_ DIB Report_Part 5

Regulatory Compliance

Read More  
What is SPRS? How Defense Contractors Are Scored on Cybersecurity
Beyond contracting officers and primes, your SPRS score is on file with the federal government. If a cyber incident occurs and DoD investigators are examining your compliance history, your SPRS submission is part of the record.
Regulatory Compliance

What is SPRS? How Defense Contractors Are Scored on Cybersecurity

May 26, 2026 8 min read
What is DFARS 252.204-7012? A Guide for Defense Contractors
Regulatory Compliance

What is DFARS 252.204-7012? A Guide for Defense Contractors

May 14, 2026 8 min read
CMMC Compliance Deadline 2026: Key Dates That Affect Your DoD Contract
Regulatory Compliance

CMMC Compliance Deadline 2026: Key Dates That Affect Your DoD Contract

Apr 13, 2026 6 min read

Threat Hunting & Intelligence

Read More  
One Email, Five Layers: Anatomy of an AiTM Phishing Kill Chain
Threat Hunting and Intelligence

One Email, Five Layers: Anatomy of an AiTM Phishing Kill Chain

Jul 16, 2026 7 min read
Ransomware Gang or IT Admin?
PowerShell script used deliberate attempts to bypass CrowdStrike EDR using native BitLocker encryption and vssadmin shadow copy deletion.
Threat Hunting and Intelligence

Ransomware Gang or IT Admin?

Jun 24, 2026 3 min read
Trojanized ArcGIS Installer Drops Dual-Channel RAT
On May 18, 2026, RADICL observed an intrusion on a Windows endpoint originating from a trojanized ArcGIS Pro installer downloaded from a typosquatted domain.
Threat Hunting and Intelligence

Trojanized ArcGIS Installer Drops Dual-Channel RAT

May 28, 2026 8 min read

Industry Analysis

Read More  
Signal & Noise, Volume 2
Signal & Noise is your weekly brief on the latest in cybersecurity. Here's Volume 2.
Industry Analysis

Signal & Noise, Volume 2

Jul 17, 2026 4 min read
CMMC Phase II is Paused. The Cyber Threat Is Not.
DoW paused Phase II of CMMC, but the need for advanced cybersecurity is as vital as ever.
Industry Analysis

CMMC Phase II is Paused. The Cyber Threat Is Not.

Jul 14, 2026 4 min read
Signal & Noise, Volume 1
Signal & Noise is the cybersecurity industry's newsletter for all the latest news and updates from RADICL.
Industry Analysis

Signal & Noise, Volume 1

Jul 10, 2026 5 min read

Incident Response

Read More  
What Are Incident Response Solutions?
Incident Response

What Are Incident Response Solutions?

Apr 13, 2026 7 min read
A Day in the Life: Our vSOC Responds to the CrowdStrike Incident
On the evening of 7/25/24, CrowdStrike pushed a content update which caused Windows systems to crash and/or enter a reboot loop, rendering the systems unusable.
Incident Response

A Day in the Life: Our vSOC Responds to the CrowdStrike Incident

Jul 24, 2024 2 min read
I Spy a Ransomware Attack
Ransoming an espionage victim carries several advantages that can make it an ideal move for nation-state threat actors.
Incident Response

I Spy a Ransomware Attack

Jul 16, 2024 2 min read

Attack Surface & Vulnerability Management

Read More  
Iranian APT Actors Are Targeting Your PLCs — Here's What to Do
There was a joint advisory this week (AA26-097A) warning of active exploitation of internet-facing Programmable Logic Controllers (PLCs).
Attack Surface and Vulnerability Management

Iranian APT Actors Are Targeting Your PLCs — Here's What to Do

Apr 09, 2026 2 min read
CMMC Enclave: What It Is, When It Works, and How to Build the Right Compliance Boundary
Attack Surface and Vulnerability Management

CMMC Enclave: What It Is, When It Works, and How to Build the Right Compliance Boundary

Mar 26, 2026 11 min read
EP 9 - Palo Alto Networks' Daryan Dehghanpisheh on Vulnerability Management
Attack Surface and Vulnerability Management

EP 9 - Palo Alto Networks' Daryan Dehghanpisheh on Vulnerability Management

Jan 23, 2026 1 min read

Security Operations & vSOC

Read More  
SOC Cost in 2026: What It Costs to Build vs Outsource a 24/7 Security Operations Center
Security Operations & vSOC

SOC Cost in 2026: What It Costs to Build vs Outsource a 24/7 Security Operations Center

Jul 13, 2026 7 min read
SOC Automation: AI-Driven Security Operations Centers Explained
Security Operations & vSOC

SOC Automation: AI-Driven Security Operations Centers Explained

Jul 09, 2026 7 min read
SOC Alert Triage in Cybersecurity: Guide to Incident Response
Managed Security Operations

SOC Alert Triage in Cybersecurity: Guide to Incident Response

Jul 07, 2026 6 min read

Operational Resilience

Read More  
EP 57 - Cyber Resilience at the Crossroads
DIB Innovators

EP 57 - Cyber Resilience at the Crossroads

Apr 10, 2025 2 min read
EP 1 - Micro-Ant's Charles McCarrick on Innovation and Opportunity in the DIB
Micro-Ant's Charles McCarrick on Innovation and Opportunity in the DIB
DIB Innovators

EP 1 - Micro-Ant's Charles McCarrick on Innovation and Opportunity in the DIB

Dec 08, 2023 2 min read

The DIB Innovators

Celebrating the brilliant minds driving innovation in the Defense Industrial Base. Join host David Graff as he speaks with DIB leaders championing our nation’s security and shaping the future of defense technology.

Start Listening  
EP 111 — Vision Miner's Rob Lent On 9 Years Of Bootstrapping Accessible High-Temp 3D Printing
DIB Innovators

EP 111 — Vision Miner's Rob Lent On 9 Years Of Bootstrapping Accessible High-Temp 3D Printing

Jul 17, 2026 1 min read
EP 110 — AdlerAerospace’s Wilhelm Meya On The Broken Math Of Drone Defense
DIB Innovators

EP 110 — AdlerAerospace’s Wilhelm Meya On The Broken Math Of Drone Defense

Jul 14, 2026 1 min read
EP 109— Skyways' Isaac Roberts On Mass-Producing Autonomous Cargo Drones For Contested Logistics
DIB Innovators

EP 109— Skyways' Isaac Roberts On Mass-Producing Autonomous Cargo Drones For Contested Logistics

Jul 09, 2026 1 min read
RADICL_The Future of Cybersecurity_Logo
RADICL's Facebook RADICL's LinkedIn RADICL's X (Twitter) RADICL's Instagram RADICL's YouTube