Signals & Stories

Επεισόδια

• 
  Episode 7: Hard Cyber Threat Intel Pills to Swallow with Special Guest Nicole Hoffman 28.07.2026 35λ

  Every cyber threat intelligence analyst eventually encounters a few uncomfortable truths.In this episode of Signals & Stories, Kali sits down with Nicole Hoffman, Senior Threat Intelligence Analyst, creator of the Cognitive Stairways of Analysis framework, and author of the Threat Hunter Girl children's cybersecurity series, to discuss the ideas behind her viral "Hard Cyber Threat Intel Pills to Swallow" graphic.Together, they explore why the graphic resonated so deeply with the CTI community and unpack some of the profession's most enduring challenges: balancing threat research with enterprise intelligence, avoiding panic cycles, writing reports that actually influence decisions, and recognizing that more data doesn't always lead to better intelligence.Nicole also shares how her perspective has evolved over a decade in threat intelligence—from caring deeply about attribution to focusing on what truly matters for helping organizations assess and reduce risk. Along the way, she offers practical advice for new analysts, explains why tools can't replace analytical judgment, and discusses the communication skills that separate good intelligence from great intelligence.Topics covered:- The story behind the viral Hard Cyber Threat Intel Pills to Swallow graphic- Threat research vs. enterprise cyber threat intelligence- Why prioritization is one of the most important analyst skills- Escaping "panic cycles" during major cyber events- Why tools don't make better analysts- The role of attribution in intelligence reporting- Writing concise, actionable intelligence for decision-makers- Advice for analysts entering the CTI field🔗 Learn more about Nicole and her work: https://threathuntergirl.com🔗 Explore the full Signals & Stories limited series celebrating 10 years of The Vertex Project:https://vertex.link/10-year-anniversary/Learn more about The Vertex Project and Synapse: vertex.link#CyberThreatIntelligence #CTI #ThreatIntelligence #OSINT #Attribution #CyberSecurity #ThreatResearch #SignalsAndStories #TheVertexProject #SynapseJoin our community:SlackLinkedInTwitter/XBluesky
• 
  Episode 6: Avoiding Common Cyber Threat Intelligence Analyst Pitfalls 14.07.2026 45λ

  Even the most experienced cyber threat intelligence (CTI) analysts aren't immune to cognitive bias. In this episode of Signals & Stories, the team explores some of the most common analytical pitfalls that can quietly influence investigations and how strong analytical tradecraft helps avoid them.The conversation covers confirmation bias, premature threat attribution, and the dangers of forcing new activity to fit existing narratives. The team also examines today's intelligence "echo chamber," where repeated reporting can amplify assumptions without adding new evidence, making validation more important than ever.Along the way, the panel discusses why healthy analytical cultures encourage constructive disagreement, how mentorship and professional communities accelerate growth, and why curiosity remains one of the most valuable skills an analyst can develop.Whether you're new to cyber threat intelligence or have spent years in the field, this episode offers practical insights for improving analytical rigor, challenging assumptions, and producing intelligence that prioritizes evidence over ego.In this episode:• Recognizing and overcoming confirmation bias• Avoiding common threat attribution mistakes• Evaluating evidence without forcing connections• Building teams that embrace constructive debate• Why mentorship and continuous learning matter in CTITune in for a thoughtful discussion on what separates good intelligence from great intelligence and how better analytical habits lead to better decisions.Learn more about The Vertex Project and Synapse: vertex.link#CyberThreatIntelligence #CTI #ThreatIntelligence #OSINT #Attribution #CyberSecurity #ThreatResearch #SignalsAndStories #TheVertexProject #SynapseJoin our community:SlackLinkedInTwitter/XBluesky
• 
  Episode 5: The Evolution of Attribution in Cyber Threat Intelligence with Kamil Bojarski 30.06.2026 51λ

  In this episode of Signals & Stories, Kali Fencl sits down with Jennifer Kolde (thesilence), Principal Intelligence Analyst at The Vertex Project, and cyber threat intelligence expert, Kamil Bojarski, to explore how attribution has evolved over the last decade.Drawing from Kamil's recent workshop at CyCon, the conversation examines how modern cyber operations increasingly rely on complex ecosystems of contractors, infrastructure providers, malware developers, and operational teams. Together, they discuss why traditional attribution models are under pressure, how regional expertise can strengthen investigations, and why collaboration across technical CTI, OSINT, and geopolitical disciplines is essential for understanding today's threat landscape.Whether you're a threat intelligence analyst, security researcher, or simply interested in how cyber operations are changing, this episode offers valuable insights into the challenges and opportunities shaping the future of intelligence analysis.In this episode:🔹 How cyber threat intelligence has evolved over the last 10 years🔹 Why attribution is becoming more complex🔹 The growing role of public-private cyber ecosystems🔹 Why language and regional expertise matter in CTI🔹 Common pitfalls analysts face when making assumptions🔹 Lessons learned from building hands-on intelligence workshops🔹 The future of attribution, collaboration, and intelligence tradecraftLearn more about The Vertex Project and Synapse: vertex.link #CyberThreatIntelligence #CTI #ThreatIntelligence #OSINT #Attribution #CyberSecurity #ThreatResearch #SignalsAndStories #TheVertexProject #SynapseJoin our community:SlackLinkedInTwitter/XBluesky
• 
  Episode 4: How Analysts Think During an Investigation 16.06.2026 34λ

  In this episode of Signals & Stories, host Kali Fencl sits down with Vertex Project analysts Ryann "Reign" Hallback, Jen "The Silence" Kolde, and Mary Beth "Savage" Lee to explore the investigative mindset behind threat intelligence work.The conversation goes beyond indicators and malware to examine how experienced analysts approach uncertainty, evaluate evidence, and determine whether a lead is worth pursuing. The team discusses the importance of context, how to separate signal from noise, why confidence should be backed by evidence, and the cognitive biases that can derail an investigation.They also share lessons learned from years of intelligence work, including common mistakes analysts make, the challenges of proving attribution, the role of malware in investigations, and why skepticism is one of the most valuable skills an analyst can develop.Whether you're a seasoned intelligence professional or just starting your cybersecurity journey, this episode offers a candid look at the thought processes that drive effective investigations.In this episode:Where investigations really beginHow analysts decide what is worth pursuingThe difference between signal and noiseWhy context matters more than a single indicatorThe risks of over-relying on malware familiesCommon mistakes analysts makeHow Synapse helps analysts connect disparate data sourcesThe importance of showing your work and validating conclusionshttps://vertex.link/10-year-anniversary#CyberSecurity #ThreatIntelligence #CTI #CyberThreatIntel #APT1 #InformationSecurity #ThreatAnalysis #CyberPodcast #TheVertexProjectJoin our community:SlackLinkedInTwitter/XBluesky
• 
  Episode 3: On the Frontlines: A Decade of CTI with Tom Hegel 02.06.2026 38λ

  In this episode of the Signals & Stories limited series, host Kali Fencl sits down with Tom Hegel, Distinguished Threat Researcher and Research Lead at SentinelOne, alongside Visi Stark, co-founder of The Vertex Project, for a deep dive into how cyber threat intelligence has evolved over the past decade.The conversation explores the increasing professionalization of nation-state and criminal threat actors, the blurred lines between cybercrime, espionage, and hacktivism, and the growing complexity of attribution in modern CTI. Tom shares insights from SentinelOne’s research into DPRK IT workers posing as job applicants, explaining how North Korean operators infiltrate organizations through automated hiring campaigns and why cybersecurity companies themselves have become top-tier targets.The episode also examines why cross-functional intelligence sharing matters more than ever — from recruiting and HR to sales and security operations — and how organizations can use intelligence platforms to connect signals across teams. Along the way, the discussion touches on AI’s role in threat intelligence, the challenges of scaling analysis, and why analyst creativity and iterative exploration still matter in an increasingly automated world.Topics covered include:- The evolution of cyber threat actors over the last decade- DPRK IT worker operations and fake job applicants- Threat intelligence beyond the SOC- Cross-functional collaboration in cybersecurity- Intelligence platforms and analytical workflows- AI, automation, and the future of CTI researchSubscribe for more episodes from Signals & Stories as we continue exploring the past, present, and future of cyber threat intelligence.https://vertex.link/10-year-anniversary#CyberSecurity #ThreatIntelligence #CTI #CyberThreatIntel #APT1 #InformationSecurity #ThreatAnalysis #CyberPodcast #TheVertexProjectJoin our community:SlackLinkedInTwitter/XBluesky
• 
  Episode 2: “It Depends”: Attribution, Analysis, and the Evolution of Cyber Reporting 19.05.2026 42λ

  As part of The Vertex Project’s 10-year anniversary podcast series, Kali Fencl sits down with Vertex analysts Ryann “reign” Hallback, Jennifer “thesilence” Kolde, and Mary Beth “savage” Lee for a conversation about how cyber threat intelligence has evolved over the last decade and where it’s headed next.From the lasting impact of the APT1 report to the realities of attribution, intelligence sharing, media pressure, and modern threat reporting, this episode explores how analysts balance technical rigor, operational context, and public narratives in today’s cybersecurity landscape.The discussion also dives into mentorship, representation, and the qualities that truly make a great analyst: critical thinking, curiosity, adaptability, and intellectual humility.In this episode:• How cyber reporting evolved beyond malware analysis• Why attribution is more complicated than most people realize• The tension between intelligence sharing and publicity• How geopolitics now shapes cyber operations• Why diverse perspectives improve intelligence analysis• The traits that separate strong analysts from the restWhether you work in cyber threat intelligence, SOC operations, incident response, or are simply interested in how the industry has changed over the past decade, this conversation offers an inside look at the people and thinking behind modern cyber investigations.#CyberSecurity #ThreatIntelligence #CTI #CyberThreatIntel #APT1 #InformationSecurity #ThreatAnalysis #WomenInCyber #CyberPodcast #TheVertexProjecthttps://vertex.link/10-year-anniversaryJoin our community:SlackLinkedInTwitter/XBluesky
• 
  Episode 1: There’s CTI and There’s Intelligence 05.05.2026 43λ

  Cyber Threat Intelligence (CTI) has come a long way—but has its definition kept pace with its potential? In this episode, Vertex co-founders Visi Stark and John “Whippit” Rodgers reflect on a decade of CTI evolution, from manual workflows to automation-driven analysis. They explore the risks of narrowing intelligence into rigid outputs, the hidden dangers of ambiguity in modern data processing, and why precision, timing, and intentional automation are critical to delivering real impact. This conversation challenges listeners to rethink CTI not as a function, but as a discipline that drives better decisions across the business.Learn more about The Vertex Project.Celebrate our 10 Year Anniversary with us!Join our community: SlackLinkedInTwitter/XBluesky
• 
  Signals & Stories: Trailer 15.04.2026

  A lot has changed in the past 10 years, including how we collect and analyze intelligence. This is Signals and Stories, 10 years with The Vertex Project, a limited series breaking down how analysts actually investigate threats. From infrastructure pivots and identity modeling, to the hidden impact of bad data and broken assumptions, to the biases and shortcuts that quietly derail analysis.We're unpacking what it really takes to build intelligence you can trust. Featuring conversations with Vertex analysts and industry experts, this series goes beyond indicators and into the reality of modern cyber threat intelligence. 10 episodes, 10 years of lessons, 10 years with the Vertex project.vertex.link