From the research lab

Notes on cybersecurity trends.

Written by the practitioners who teach in our bootcamps, drawn from the casework and experiments running inside the REY Cyber Forensics & Cybersecurity Research Lab.

• Threat Intelligence18 August 20266 min read

  AI-driven phishing: why inbox training is no longer enough

  Generative models have removed every tell defenders used to teach. Our lab breaks down what actually reduces click-through now.

• Digital Forensics30 July 20268 min read

  Identity is the new perimeter — and the new forensic timeline

  Most intrusions we analyse now begin with a valid login. Here is how investigators rebuild the story from identity telemetry.

• SOC / SIEM11 July 20267 min read

  From alert fatigue to detection engineering

  A SOC that tunes rules like software — with versioning, tests and coverage metrics — closes incidents measurably faster.

• Incident Response24 June 20265 min read

  Ransomware recovery is a rehearsal problem

  Backups exist in almost every organisation we assess. Tested, isolated, time-bound restores exist in far fewer.