Ninja Labz
The blog
Notes from the bench: what we built, what broke, what we forgot we had, and what it taught us. Written by ScottG, usually at an unreasonable hour.
"60% of small businesses close within six months of a cyberattack" — the statistic with no source
Myth check #1. It has been quoted in Congress, in federal testimony and in a bill. The organisation it is credited to says it isn't theirs, and nobody has ever found where it came from.
Botnet size numbers are mostly wrong — here's what you can actually measure
"Ten million infected devices" is a headline, not a measurement. The honest unit is the C2 estate, and almost nobody reports it.
What is the CISA KEV catalog — and how to actually use it
The shortest, most useful list in security — and the one most patching programmes still ignore.
CVE, CVSS, EPSS, KEV — the vulnerability alphabet, finally explained
Four acronyms decide which holes get fixed. Most teams only understand one of them — and it's the least useful one.
How ransomware gangs actually choose victims
Mostly, they don't choose you. They choose a door, and you happen to be behind it. Data from 22,000+ tracked claims.
What is MITRE ATT&CK actually for? (not what you think)
It's not a maturity checklist and it's not a bingo card. It's a shared language — and three specific jobs it does brilliantly.
Ransomware-as-a-service, explained like the business it is
RaaS is a franchise model with better margins than most startups. Understanding the org chart is half of understanding the threat.
Supply chain attacks, explained properly
You can be breached by a company you've never heard of, through a contract you forgot you signed. Here's how that works and what to watch.
What AI-Native Security Actually Looks Like
Not a chatbot bolted onto a SIEM. A security operation where AI does the reading, the correlating and the first draft of the response, evidence decides, and a human approves change. Live, on production, with receipts.
We Built Five Globes and Forgot Four of Them
Ontology Ops, or how I discovered what I own by asking a machine to read my notes.