Threat Intelligence

OSINT investigations and case studies on phishing infrastructure, nation-state operations, and emerging threats.

RivasSec

Infrastructure. Security. Insight.

Field notes on infrastructure security, cloud hardening, Kubernetes, IAM, and OSINT by RivasSec.

Prompt Injection Will Become a Supply Chain Evasion Technique

Posted on Fri 12 June 2026 in Threat Intelligence • 4 min read

ai
supply-chain
prompt-injection
evasion
defensive-architecture

Prompt injection's threat model is older than the term. The mechanism is new, the objective is the evasion goal attackers have pursued for decades.

Catching a Nation-State Proxy: OSINT on Twitter

Posted on Thu 17 April 2025 in Threat Intelligence • 3 min read

osint
threat-intelligence
phishing
devsecops

In 2012 I traced a state-aligned Twitter proxy tied to Venezuela's ruling party. OSINT lessons for spotting subtle, credential-phishing nation-state infra.