Author name: Claudia Galingani Mongini

Chief Marketing Officer • social engineer OSINT/SOC/HUMINT • cyberculture • security analyst • polymath • COBOL programmer • nerd • retrogamer

40 minutes. From model resistance to live RCE on federal infrastructure."
Cybersecurity Insights PacketHunters

🎣 #PacketHunters – One operator. Nine Gov agencies. 195 million records. Claude Code did the recon 💥

Between December 2025 and February 2026, one attacker breached nine Mexican government organizations using a dual-AI workflow: Claude Code for live exploitation, GPT-4.1 for post-exploitation reconnaissance at scale. 75% of remote command execution was AI-generated. RCE on a federal server in 40 minutes. This is the PacketHunters breakdown, including defensive scripts and what the forgery system built afterward means for your incident response assumptions.

How crypto companies get owned? Three anonymized breach patterns and the OSINT surface they left behind
Customer Stories / Case Studies Cybersecurity Insights PacketHunters

🎣 #PacketHunters – How crypto companies get owned? Three anonymized breach patterns and the OSINT surface they left behind

Smart contract exploits are declining. Human-layer attacks are not. In 2025, phishing led all crypto attack categories by incident count. We reconstructed three anonymized breach patterns (an exchange, a DeFi protocol, a Web3 startup) and built detection scripts around the OSINT surface each one exposed before the attack landed.

Before a phishing email hits your inbox, your company has already been profiled.
Cybersecurity Insights PacketHunters

🎣 #PacketHunters – Exposure surface mapping: how much of your company is visible in 20 minutes?

Before a phishing email is written, your company has already been profiled. Names, roles, email patterns, VPN portals, cloud providers — all gathered through open sources in under 20 minutes. In this PacketHunters breakdown, we map real organizational exposure using OSINT and Python, and show why phishing defense starts long before the first malicious link is sent.

They already know. You just don't know they know. (entering the Exposure Month at Baited)
Cybersecurity Insights Decoded

Decoded: Nerd Thoughts – They already know. You just don’t know they know. (entering the Exposure Month at Baited)

March is about exposure. Not the embarrassing kind — the dangerous kind. Before any attacker sends a single phishing email, they already know your org inside out. OSINT, attack surface recon, open data trails.. this month we pull back the curtain on what’s visible, what’s exploitable, and why the scariest hacks start with a Google search.

COBOL is a thing.
Cybersecurity Insights Decoded

Legacy code, modern phishing: why COBOL is not the problem (nobody remembers how the machine thinks)

A public tender from Sogei seeking COBOL programmers exposes a deeper issue: critical legacy systems still run modern economies. When knowledge disappears and governance lags behind, outdated environments become prime targets for phishing-driven takeovers. The real risk is not COBOL itself, but unmanaged identity and uncurated trust layered on aging infrastructure.

Scroll to Top