<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Exposed</title>
    <link>https://exposed.pub</link>
    <description>Street photography and cyber threat intelligence. A Cyber League Studios publication.</description>
    <language>en</language>
    <copyright>© 2026 Cyber League Studios</copyright>
    <atom:link href="https://exposed.pub/rss.xml" rel="self" type="application/rss+xml" />

    <item>
      <title><![CDATA[Cyber Threat Brief — Issue #012]]></title>
      <link>https://exposed.pub/brief/issue-012</link>
      <guid isPermaLink="true">https://exposed.pub/brief/issue-012</guid>
      <description><![CDATA[What's active. What matters. What to do about it.]]></description>
      <pubDate>Fri, 03 Jul 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[Cyber Threat Brief — Issue #011]]></title>
      <link>https://exposed.pub/brief/issue-011</link>
      <guid isPermaLink="true">https://exposed.pub/brief/issue-011</guid>
      <description><![CDATA[What's active. What matters. What to do about it.]]></description>
      <pubDate>Fri, 26 Jun 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[Cyber Threat Brief — Issue #010]]></title>
      <link>https://exposed.pub/brief/issue-010</link>
      <guid isPermaLink="true">https://exposed.pub/brief/issue-010</guid>
      <description><![CDATA[What's active. What matters. What to do about it.]]></description>
      <pubDate>Wed, 17 Jun 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[Cyber Threat Brief — Issue #009]]></title>
      <link>https://exposed.pub/brief/issue-009</link>
      <guid isPermaLink="true">https://exposed.pub/brief/issue-009</guid>
      <description><![CDATA[What's active. What matters. What to do about it.]]></description>
      <pubDate>Wed, 10 Jun 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[Cyber Threat Brief — Issue #008]]></title>
      <link>https://exposed.pub/brief/issue-008</link>
      <guid isPermaLink="true">https://exposed.pub/brief/issue-008</guid>
      <description><![CDATA[What's active. What matters. What to do about it.]]></description>
      <pubDate>Wed, 03 Jun 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[Cyber Threat Brief — Issue #007]]></title>
      <link>https://exposed.pub/brief/issue-007</link>
      <guid isPermaLink="true">https://exposed.pub/brief/issue-007</guid>
      <description><![CDATA[What's active. What matters. What to do about it.]]></description>
      <pubDate>Wed, 27 May 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[Cyber Threat Brief — Issue #006]]></title>
      <link>https://exposed.pub/brief/issue-006</link>
      <guid isPermaLink="true">https://exposed.pub/brief/issue-006</guid>
      <description><![CDATA[What's active. What matters. What to do about it.]]></description>
      <pubDate>Wed, 20 May 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[Hallucination]]></title>
      <link>https://exposed.pub/doctrine/hallucination</link>
      <guid isPermaLink="true">https://exposed.pub/doctrine/hallucination</guid>
      <description><![CDATA[AI models generate confident-sounding answers whether or not those answers are true. Understanding why this happens changes how you should use every AI tool you interact with.]]></description>
      <pubDate>Thu, 14 May 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[Non-Human Identity]]></title>
      <link>https://exposed.pub/doctrine/non-human-identity</link>
      <guid isPermaLink="true">https://exposed.pub/doctrine/non-human-identity</guid>
      <description><![CDATA[Every AI agent, service account, and API key in your organization has an identity with privileges. Most organizations have never counted them all.]]></description>
      <pubDate>Thu, 14 May 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[The Can]]></title>
      <link>https://exposed.pub/street/dumpster-diving</link>
      <guid isPermaLink="true">https://exposed.pub/street/dumpster-diving</guid>
      <description><![CDATA[Dumpster Diving — New York, NY]]></description>
      <pubDate>Thu, 14 May 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[The Backup That Wasn't There]]></title>
      <link>https://exposed.pub/horrors/the-backup-that-wasnt-there</link>
      <guid isPermaLink="true">https://exposed.pub/horrors/the-backup-that-wasnt-there</guid>
      <description><![CDATA[An Illinois hospital permanently closed after a ransomware attack destroyed its finances. It was the first healthcare facility in US history to cite a cyberattack as the primary reason for shutting down.]]></description>
      <pubDate>Wed, 13 May 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[The Dam They Almost Opened]]></title>
      <link>https://exposed.pub/horrors/the-dam-they-almost-opened</link>
      <guid isPermaLink="true">https://exposed.pub/horrors/the-dam-they-almost-opened</guid>
      <description><![CDATA[In 2016, the US Department of Justice charged an Iranian hacker with gaining access to the control system of a dam in Rye, New York. The dam was 20 miles from New York City. The sluice gate was only disconnected for maintenance — otherwise he could have operated it remotely.]]></description>
      <pubDate>Wed, 13 May 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[The Ghost in the Network]]></title>
      <link>https://exposed.pub/horrors/the-ghost-in-the-network</link>
      <guid isPermaLink="true">https://exposed.pub/horrors/the-ghost-in-the-network</guid>
      <description><![CDATA[The SolarWinds attackers were inside US government networks for at least nine months before being discovered. They had access to the Treasury, the State Department, Homeland Security, and parts of the Pentagon. Nobody noticed.]]></description>
      <pubDate>Wed, 13 May 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[The Lights Were Already On]]></title>
      <link>https://exposed.pub/horrors/the-lights-were-already-on</link>
      <guid isPermaLink="true">https://exposed.pub/horrors/the-lights-were-already-on</guid>
      <description><![CDATA[A hacker increased the lye concentration in a Florida town's drinking water to 111 times the normal level. An operator happened to be watching.]]></description>
      <pubDate>Wed, 13 May 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[They Waited Two Years to Tell You]]></title>
      <link>https://exposed.pub/horrors/they-waited-two-years-to-tell-you</link>
      <guid isPermaLink="true">https://exposed.pub/horrors/they-waited-two-years-to-tell-you</guid>
      <description><![CDATA[The UK Electoral Commission was breached in August 2021. The public was not informed until August 2023. The data of 40 million British voters was exposed for almost two years before anyone outside the organization knew.]]></description>
      <pubDate>Wed, 13 May 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[Protocol Failure]]></title>
      <link>https://exposed.pub/aftermath/protocol-failure</link>
      <guid isPermaLink="true">https://exposed.pub/aftermath/protocol-failure</guid>
      <description><![CDATA[A cursor moved on its own. 230,000 people lost power. The temperature was below freezing.]]></description>
      <pubDate>Wed, 13 May 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[Cyber Threat Brief — Issue #005]]></title>
      <link>https://exposed.pub/brief/issue-005</link>
      <guid isPermaLink="true">https://exposed.pub/brief/issue-005</guid>
      <description><![CDATA[What's active. What matters. What to do about it.]]></description>
      <pubDate>Wed, 13 May 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[Residency]]></title>
      <link>https://exposed.pub/street/pre-positioning</link>
      <guid isPermaLink="true">https://exposed.pub/street/pre-positioning</guid>
      <description><![CDATA[Pre-positioning — Herald Square, NYC]]></description>
      <pubDate>Wed, 06 May 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[Cyber Threat Brief — Issue #004]]></title>
      <link>https://exposed.pub/brief/issue-004</link>
      <guid isPermaLink="true">https://exposed.pub/brief/issue-004</guid>
      <description><![CDATA[What's active. What matters. What to do about it.]]></description>
      <pubDate>Wed, 06 May 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[AI Agents]]></title>
      <link>https://exposed.pub/doctrine/agents</link>
      <guid isPermaLink="true">https://exposed.pub/doctrine/agents</guid>
      <description><![CDATA[What AI agents actually are, what they can do, and why the permissions you give them matter more than the AI itself.]]></description>
      <pubDate>Fri, 01 May 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[Prompt Injection]]></title>
      <link>https://exposed.pub/doctrine/prompt-injection</link>
      <guid isPermaLink="true">https://exposed.pub/doctrine/prompt-injection</guid>
      <description><![CDATA[What prompt injection is, how it works, why more capable AI makes it worse, and why limiting what agents can do is the only real defence.]]></description>
      <pubDate>Fri, 01 May 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[Shadow AI]]></title>
      <link>https://exposed.pub/doctrine/shadow-ai</link>
      <guid isPermaLink="true">https://exposed.pub/doctrine/shadow-ai</guid>
      <description><![CDATA[What happens when employees use AI tools IT doesn't know about, why bans don't work, and what organizations can actually do about it.]]></description>
      <pubDate>Fri, 01 May 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[Cyber Threat Brief — Issue #003]]></title>
      <link>https://exposed.pub/brief/issue-003</link>
      <guid isPermaLink="true">https://exposed.pub/brief/issue-003</guid>
      <description><![CDATA[What's active. What matters. What to do about it.]]></description>
      <pubDate>Thu, 30 Apr 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[The Fish Tank]]></title>
      <link>https://exposed.pub/aftermath/the-fish-tank</link>
      <guid isPermaLink="true">https://exposed.pub/aftermath/the-fish-tank</guid>
      <description><![CDATA[A casino breached through its lobby fish tank. Ten gigabytes out before anyone noticed.]]></description>
      <pubDate>Wed, 29 Apr 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[Still Holding]]></title>
      <link>https://exposed.pub/street/moldy-cart</link>
      <guid isPermaLink="true">https://exposed.pub/street/moldy-cart</guid>
      <description><![CDATA[Data Remanence — Queens, NYC]]></description>
      <pubDate>Wed, 29 Apr 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[Attack Surface]]></title>
      <link>https://exposed.pub/street/attack-surface</link>
      <guid isPermaLink="true">https://exposed.pub/street/attack-surface</guid>
      <description><![CDATA[Attack Surface Management — Union Square, NYC]]></description>
      <pubDate>Fri, 24 Apr 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[Still Here]]></title>
      <link>https://exposed.pub/street/dwell-time</link>
      <guid isPermaLink="true">https://exposed.pub/street/dwell-time</guid>
      <description><![CDATA[Dwell Time — New York, NY]]></description>
      <pubDate>Fri, 24 Apr 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[Covered]]></title>
      <link>https://exposed.pub/street/opsec</link>
      <guid isPermaLink="true">https://exposed.pub/street/opsec</guid>
      <description><![CDATA[OPSEC — SoHo, NYC]]></description>
      <pubDate>Fri, 24 Apr 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[Caution]]></title>
      <link>https://exposed.pub/street/security-theater</link>
      <guid isPermaLink="true">https://exposed.pub/street/security-theater</guid>
      <description><![CDATA[Security Theater — New York, NY]]></description>
      <pubDate>Fri, 24 Apr 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[The Copy]]></title>
      <link>https://exposed.pub/street/spoofing</link>
      <guid isPermaLink="true">https://exposed.pub/street/spoofing</guid>
      <description><![CDATA[Spoofing — West Village, NYC]]></description>
      <pubDate>Fri, 24 Apr 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[Signed]]></title>
      <link>https://exposed.pub/street/web-defacement</link>
      <guid isPermaLink="true">https://exposed.pub/street/web-defacement</guid>
      <description><![CDATA[Web Defacement — New York, NY]]></description>
      <pubDate>Fri, 24 Apr 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[MGM Resorts 2023 — Anatomy of an Identity Attack]]></title>
      <link>https://exposed.pub/assessment/scattered-spider-mgm-2023</link>
      <guid isPermaLink="true">https://exposed.pub/assessment/scattered-spider-mgm-2023</guid>
      <description><![CDATA[How a 10-minute vishing call gave Scattered Spider full access to MGM Resorts — no malware required. A threat intelligence assessment of the 2023 identity attack that triggered $100M+ in losses.]]></description>
      <pubDate>Wed, 22 Apr 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[The Long Game]]></title>
      <link>https://exposed.pub/street/apt</link>
      <guid isPermaLink="true">https://exposed.pub/street/apt</guid>
      <description><![CDATA[Advanced Persistent Threat (APT) — Union Square, NYC]]></description>
      <pubDate>Wed, 22 Apr 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[The Observer]]></title>
      <link>https://exposed.pub/street/passive-recon</link>
      <guid isPermaLink="true">https://exposed.pub/street/passive-recon</guid>
      <description><![CDATA[Passive Reconnaissance — New York, NY]]></description>
      <pubDate>Wed, 22 Apr 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[Cyber Threat Brief — Issue #002]]></title>
      <link>https://exposed.pub/brief/issue-002</link>
      <guid isPermaLink="true">https://exposed.pub/brief/issue-002</guid>
      <description><![CDATA[What's active. What matters. What to do about it.]]></description>
      <pubDate>Wed, 22 Apr 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[The Path]]></title>
      <link>https://exposed.pub/street/lateral-movement</link>
      <guid isPermaLink="true">https://exposed.pub/street/lateral-movement</guid>
      <description><![CDATA[Lateral Movement — Queens, NYC]]></description>
      <pubDate>Tue, 21 Apr 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[The Sealed Building]]></title>
      <link>https://exposed.pub/street/air-gap</link>
      <guid isPermaLink="true">https://exposed.pub/street/air-gap</guid>
      <description><![CDATA[Air Gap — Roosevelt Island, NYC]]></description>
      <pubDate>Mon, 20 Apr 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[Script Kiddies]]></title>
      <link>https://exposed.pub/street/script-kiddies</link>
      <guid isPermaLink="true">https://exposed.pub/street/script-kiddies</guid>
      <description><![CDATA[Script Kiddies — Roosevelt Island, NYC]]></description>
      <pubDate>Sun, 19 Apr 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[Boys in Blue]]></title>
      <link>https://exposed.pub/street/zero-trust</link>
      <guid isPermaLink="true">https://exposed.pub/street/zero-trust</guid>
      <description><![CDATA[Zero Trust — Financial District, NYC]]></description>
      <pubDate>Sat, 18 Apr 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[End of Life]]></title>
      <link>https://exposed.pub/street/end-of-life</link>
      <guid isPermaLink="true">https://exposed.pub/street/end-of-life</guid>
      <description><![CDATA[Legacy Systems — Queens, NYC]]></description>
      <pubDate>Fri, 17 Apr 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[The Handler]]></title>
      <link>https://exposed.pub/street/remote-access</link>
      <guid isPermaLink="true">https://exposed.pub/street/remote-access</guid>
      <description><![CDATA[Remote Access Trojan — Financial District, NYC]]></description>
      <pubDate>Thu, 16 Apr 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[Red Team. Blue Team.]]></title>
      <link>https://exposed.pub/street/red-blue</link>
      <guid isPermaLink="true">https://exposed.pub/street/red-blue</guid>
      <description><![CDATA[Incident Response — Roosevelt Island, NYC]]></description>
      <pubDate>Wed, 15 Apr 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[NotPetya 2017 — Attribution & Defensive Implications]]></title>
      <link>https://exposed.pub/assessment/notpetya-2017</link>
      <guid isPermaLink="true">https://exposed.pub/assessment/notpetya-2017</guid>
      <description><![CDATA[NotPetya 2017]]></description>
      <pubDate>Wed, 01 Apr 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[Cyber Threat Brief — Issue #001]]></title>
      <link>https://exposed.pub/brief/issue-001</link>
      <guid isPermaLink="true">https://exposed.pub/brief/issue-001</guid>
      <description><![CDATA[What's active. What matters. What to do about it.]]></description>
      <pubDate>Sun, 29 Mar 2026 00:00:00 GMT</pubDate>
    </item>
  </channel>
</rss>