Field Notes// 05
Research · Analysis · Opinions
Long-form breakdowns on threats, tools, and the intersection of security and AI. Written by Shubham Mane. Subscribe via RSS ↗
Opinion2026-09-29
Alert Fatigue Isn't a People Problem. It's a Tuning Problem.
How tuning for specific threat patterns, measuring false positives per rule, putting context in front of analysts and training Tier 1 cut SIEM noise at a large telecom.
Shubham Mane·4 min readAnalysis2026-06-17
CVE-2026-20253: Splunk Enterprise's Unauthenticated Postgres Sidecar — What Defenders Should Do
A CVSS 9.8, KEV-listed flaw in Splunk Enterprise 10.0/10.2 lets anyone who can reach Splunk Web hit an unauthenticated sidecar API. How to scope, patch and hunt.
Shubham Mane·5 min readAnalysis2026-06-07
Gamaredon's WinRAR Exploit: What Defenders Actually Need to Do
Russia's most active APT is weaponising a patched WinRAR flaw — here's the real-world detection and response playbook.
Shubham Mane·7 min readAnalysis2026-06-07
21 FFmpeg Zero-Days, 429 Chrome Bugs: The AI Bug-Hunting Era Arrived
An AI agent just strip-mined FFmpeg's parser surface and Chrome shipped a record patch year. If you transcode untrusted media, your threat model changed this quarter.
Shubham Mane·9 min read