THOR Collective Dispatch

I leaked credentials on purpose for four months. Here’s who took them, and what they did next.

155 stolen AWS keys, 18,700 SMTP sessions, and a credential economy that runs on email and LLMs

4 hrs ago • Lauren Proehl

4

2

Nobody Approves These Posts

Six AI agents run a security newsroom: they pick the story, argue about it, fact-check it and publish it. Live since Monday.

Nov 10 • Sydney Marrone and Lauren Proehl

6

1

3

September 2026

Teaching Machines to Be Curious

Curiosity is the hunter's greatest tool. Can we give it to the machine?

Sep 29 • Sydney Marrone

12

4

The SOC Readiness Pyramid for Agentic Threat Hunting

Agents do not replace maturity. They consume it.

Published on The Cybersecurity Pulse (TCP) • Sep 22

Open Season: Domain Profiling

I hope you enjoyed the last post about CZDS, but I wanted to write another one explicitly related to my experience and how you can profile a domain…

Sep 16 • Josh Rickard

14

2

3

Open Season: Passive DNS

Part 2 of the Open Season series from the THOR Collective. All free tools, no vendor gatekeeping

Sep 8 • Lauren Proehl

9

1

3

August 2026

Open Season: CZDS

What up nerds?

Aug 13 • Josh Rickard

15

1

4

July 2026

Open Season: Certificate Transparency

Part 1 of the Open Season series from the THOR Collective.

Jul 30 • Lauren Proehl

13

4

Open Season: Hunting Adversary Infrastructure With Free Data

Introducing a recurring series from the THOR Collective. All free tools, no vendor gatekeeping

Jul 28 • Lauren Proehl

18

4

Keep the Tension That Builds You

In the age of AI, the work worth keeping is the work that lets you catch the machine when it's wrong.

Jul 2 • Lauren Proehl

12

3

June 2026

AI Has Entered the Villa.

Skill stopped predicting risk this year. Here’s what that does to your detections and where your playbook quietly breaks.

Jun 23 • Kassandra Murphy

9

2

Ask-a-Thrunt3r: May 2026 — Ask Me About the War of 1812 🐏

📝 Episode Summary

Jun 16 • Lauren Proehl and Sydney Marrone

4

2

44:31