PIVOT Security

Field notes / PIVOT Research

Threat intelligence and tradecraft, written by the team that runs the engagements.

Long-form research, breach autopsies, and notes from the offensive side of the table. No vendor talking points, no growth hacks, no fluff.

Popular topicsPhishingRed TeamEDR BypassThreat IntelligenceAI SecurityResearch

Newest

Off the press

AI Voice Phishing in 2026, A Comprehensive Field Guide
Latest. Phishing

AI Voice Phishing in 2026, A Comprehensive Field Guide

A practitioner level breakdown of AI enabled voice phishing in 2026. How the attack works, why it has become cheap, what we are seeing in real engagements, and a layered defense plan that does not depend on any single vendor.

Raju GautamMay 01, 2026
3D Phishing in 2026, A Comprehensive Engineering Guide
Phishing

3D Phishing in 2026, A Comprehensive Engineering Guide

Apr 28, 2026
Spear Phishing in 2026, Why It Still Works and How to Stop Falling For It
Phishing

Spear Phishing in 2026, Why It Still Works and How to Stop Falling For It

Apr 24, 2026
AI and Cybersecurity, The State of Play in 2026
Phishing

AI and Cybersecurity, The State of Play in 2026

Apr 15, 2026

Archive

Every post we have shipped.

Filter by tag, search by anything. Twelve at a time. Load more when you want more.

42 posts
3D Phishing in 2026, A Comprehensive Engineering Guide
Phishing

3D Phishing in 2026, A Comprehensive Engineering Guide

A practitioner level engineering guide to 3D phishing in 2026. Multimodal attack anatomy, attacker economics, orchestration sketches, detection rules across email, telephony, and video, hardened email auth configuration, identity controls, and a layered defense plan.

Raju GautamApr 28, 2026
AI and Cybersecurity, The State of Play in 2026
Phishing

AI and Cybersecurity, The State of Play in 2026

A practitioner view of where AI sits in cybersecurity in 2026, the attacks we are seeing in the field, the defenses that earned their seat, and the tooling categories that matter.

Raju GautamApr 15, 2026
AI Voice Phishing in 2026, A Comprehensive Field Guide
Phishing

AI Voice Phishing in 2026, A Comprehensive Field Guide

A practitioner level breakdown of AI enabled voice phishing in 2026. How the attack works, why it has become cheap, what we are seeing in real engagements, and a layered defense plan that does not depend on any single vendor.

Raju GautamMay 01, 2026
AI in Phishing Detection and Trainings
Phishing

AI in Phishing Detection and Trainings

Explore how AI-powered detection systems and machine learning enhance phishing defense, employee training, and cybersecurity against social engineering and data breaches.

Nikhil SrivastavaAug 08, 2024
Are Your Employees Equipped to Recognize and Avoid Phishing Attacks?
Phishing

Are Your Employees Equipped to Recognize and Avoid Phishing Attacks?

Effective cybersecurity training is crucial for employees to tackle evolving threats like phishing and social engineering, ensuring compliance with data protection regulations and incident response readiness.

Raju GautamJul 01, 2024
Data Breach on AT&T - A Closer Look
Threat Intelligence

Data Breach on AT&T - A Closer Look

AT&T's recent data breach exposed the personal information of 73 million users, including phone numbers and potentially cell site location data.

Raju GautamJul 26, 2024
Can Your Organization Detect and Respond to Advanced Persistent Threats (APTs)?
Threat Intelligence

Can Your Organization Detect and Respond to Advanced Persistent Threats (APTs)?

Detect and neutralize Advanced Persistent Threats (APTs) with our advanced threat detection capabilities.

Nikhil SrivastavaJul 02, 2024
The Critical Role of Cybersecurity in Modern Banking
Compliance

The Critical Role of Cybersecurity in Modern Banking

This blog explores the evolving cybersecurity landscape in India's banking sector, highlighting threats, defenses, and regulatory responses.

Dhruvi BansalAug 16, 2024
Bro, Do you even H/Invoke?
Red Team

Bro, Do you even H/Invoke?

The series explores techniques for gaining initial access in hardened environments, focusing on dynamic function resolution using H/Invoke within .NET.

Amit PanghalMar 05, 2024
Do Your Employees Receive Regular and Effective Cybersecurity Training?
Phishing

Do Your Employees Receive Regular and Effective Cybersecurity Training?

A practical guide to cybersecurity awareness training that actually changes behaviour. What good looks like in 2026, why most programs fail, role specific curricula, simulation done right, and the metrics worth reporting to the board.

Raju GautamJan 19, 2026
Growing Cybercrime & The Need For An Indian Cybersecurity Force
Threat Intelligence

Growing Cybercrime & The Need For An Indian Cybersecurity Force

A comprehensive analysis of India's escalating cybercrime landscape in 2025, examining actual incidents, evolving threats, and the critical need for a dedicated national cybersecurity force.

Raju GautamJan 02, 2026
How AI and Machine Learning are Enhancing Healthcare Cybersecurity
AI Security

How AI and Machine Learning are Enhancing Healthcare Cybersecurity

An in-depth analysis of how AI and machine learning are enhancing healthcare cybersecurity, highlighting the evolving threat landscape and the importance of robust cybersecurity measures.

Raju GautamSep 06, 2024