Threat intel, DFIR
and security notes
Deep-dives, investigation write-ups, tooling notes and transparent product updates from the Mlab team. Written for analysts who want the indicators, the method and the fix.
Articles
49
Categories
9
Tags
142
Latest
July 10, 2026
#kev
Newest first
Vulnerability Management
The Vulnerabilities Threat Actors Actually Exploit
Attackers do not exploit CVEs at random. Cross-referencing actor profiles with their known exploited vulnerabilities reveals clear patterns you can use to prioritize patching.
6 min
Vulnerability Management
CVSS, EPSS, KEV: How to Actually Prioritize Vulnerabilities
Patching by CVSS score alone drowns your team in criticals that will never be exploited. Here is how to combine CVSS, EPSS, and CISA KEV into a priority queue that works.
7 min
Engineering
A 421M decision model in front of our MCP output? Not yet
Studies, benchmarks and build notes. Method first, numbers included, losses too.
Read the latest note