John Bambenek

John Bambenek is President of Bambenek Labs and an incident handler at the SANS Internet Storm Center. He specializes in data mining threat intelligence data and performing online surveillance of criminal infrastructure to provide near-time and real-time intelligence products to product customers and to aid in criminal investigations.

3 min read

The Biggest Flaw in Security Operations Architecture

Jul 7, 2026 by Raju Chekuri

There is a structural mismatch at the heart of most enterprise security...

3 min read

Using Graph Analytics for Lateral Movement Detection

Jul 2, 2026 by Raju Chekuri

There was a specific moment in an early customer engagement that changed how I...

4 min read

The Flywheel of SecOps Automation and Domain Memory

Jun 30, 2026 by Raju Chekuri

In conversations with security leaders, I often ask a question that produces a...

7 min read

The 3-minute Heist: Securing Modern Environments against Cloud Data Exfiltration.

Jun 9, 2026 by Suma Ballal

Modern cloud environments have fundamentally changed how enterprise data is...

7 min read

Non-Human Identity Security: Why Defending NHIs Requires Detection and Posture Working Together

Jun 9, 2026 by Suma Ballal

Non-Human Identities (NHIs)—service accounts, automation tokens, CI/CD pipeline...

5 min read

Revolutionizing Telemetry: Announcing Praxis Intelligent Data Pipeline Management by Netenrich for Google SecOps

Jun 5, 2026 by Netenrich

As modern enterprises scale, their security operations inevitably face a...

20 min read

LiteLLM PyPI Supply Chain Attack: What Happened & How to Fix It

Apr 6, 2026 by Harsha Koushik

Overview

On March 24, 2026, two malicious versions of the litellm Python...

Categories

John Bambenek

From The CEO Desk

The Biggest Flaw in Security Operations Architecture

Using Graph Analytics for Lateral Movement Detection

The Flywheel of SecOps Automation and Domain Memory

Agentic SOC

The 3-minute Heist: Securing Modern Environments against Cloud Data Exfiltration.

Non-Human Identity Security: Why Defending NHIs Requires Detection and Posture Working Together

Revolutionizing Telemetry: Announcing Praxis Intelligent Data Pipeline Management by Netenrich for Google SecOps

Threat Research

LiteLLM PyPI Supply Chain Attack: What Happened & How to Fix It

Overview

More Categories

Security Operations

Thought Leadership

Threat Intelligence

Automation & SOAR

Detection Engineering

AI/ML

Security Analytics

AIOps & Digital Operation

The Rich Life

Adaptive SecOps

As seen on

Subscribe for updates

Subscribe to our Blog