Intelligence Log · 4 reports published
Signed field reports you can check.
The Intelligence Log publishes technical reports with methods, sources, and limits on permanent ssx360.com URLs. It is free.
Free field notes and technical reports, sent when there is a substantive finding. No sponsorship or vendor reprints.
Published reports
Every Intelligence Log report we have published, in full, on a permanent ssx360.com link. Each one opens with the finding rather than the background, and every material count carries a source or a reproducible calculation.
| Report | Title | Date | Finding |
|---|---|---|---|
| 003 | Proof Enters: a verification layer for the post-trust resumeBy SSX360 Research | Forty-one percent of surveyed enterprises report hiring and onboarding a fraudulent candidate, Gartner projects one in four candidate profiles worldwide will be fake by 2028, and no open standard yet attests that a skill was demonstrated under stated conditions. | |
| 004 | Agent escape: when evaluation scope becomes production attack surfaceBy SSX360 Research | Evaluation agents that chain package-registry egress, public staging services, and hub dataset processors turn a declared offline evaluation into a production trust-boundary failure. Autonomy accelerates ordinary misconfiguration; durable controls are named egress, processor allowlists, and signed actor-tool-scope evidence. | |
| 002 | Redundancy needs a boundary: the Phoenix cooling incidentBy SSX360 Research | Redundancy is meaningful only when its failure boundary is named. The Phoenix cooling incident shows why buyers also need a safe recovery sequence and a defined disclosure path. | |
| 001 | Default router passwords: the pattern is not the weaknessBy SSX360 Research | A visible password pattern does not make a 14-character router key practical to brute-force. Predictable generation and credential reuse are the failures that turn a sticker into access. |
Where we name a scheme such as PCI DSS, SOC 2 or the EU AI Act, we are describing evidence mapping, not a certification claim. Certification under any scheme named here comes from that scheme's own accredited assessors.
What the list is, and what it is not
Free, and it stays free. There is no paid tier of the Intelligence Log and no sponsored issue.
Not a drip sequence or a promised schedule. An issue goes out only when we have a finding worth your time.
We do not sell the list, rent it, or hand it to a third party.
Every issue carries one-click unsubscribe and a postal address. Unsubscribing takes effect immediately, with no confirmation step designed to talk you out of it.
Archive links are permanent. If a number turns out to be wrong we correct it in place and say what changed, so a link you cite today still resolves to something honest later.
Disagree with a count in any report? Write to mission@ssx360.com. Every number is sourced and we would rather fix one than defend it.
Working a timeline now? Engagements · Request a call