<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Scott Altiparmak</title>
    <link>https://scottaltiparmak.com</link>
    <description>Security engineering insights on Identity, security automation, and security engineering from Scott Altiparmak, Senior Information Security Engineer based in Miami, FL.</description>
    <language>en-us</language>
    <managingEditor>hello@scottaltiparmak.com (Scott Altiparmak)</managingEditor>
    <webMaster>hello@scottaltiparmak.com (Scott Altiparmak)</webMaster>
    <lastBuildDate>Tue, 06 Oct 2026 12:46:52 GMT</lastBuildDate>
    <atom:link href="https://scottaltiparmak.com/feed.xml" rel="self" type="application/rss+xml"/>
    <image>
      <url>https://scottaltiparmak.com/ScottAltiparmak_Headshot.jpg</url>
      <title>Scott Altiparmak</title>
      <link>https://scottaltiparmak.com</link>
    </image>
    
    <item>
      <title><![CDATA[How Vulnerability Research Has Changed in 2026: Slop, Signal, and CVE-2026-7787]]></title>
      <link>https://scottaltiparmak.com/blog/how-vulnerability-research-has-changed-in-2026</link>
      <guid isPermaLink="true">https://scottaltiparmak.com/blog/how-vulnerability-research-has-changed-in-2026</guid>
      <description><![CDATA[Vulnerability research has changed. An AI sweep produces leads by the pile, and the line between automated slop and a useful report is blurry. What separates them is the verification and judgment applied afterward, which is how one lead became CVE-2026-7787 in Langflow.]]></description>
      <pubDate>Mon, 22 Jun 2026 00:00:00 GMT</pubDate>
      <category><![CDATA[AI]]></category>
      <category><![CDATA[Offensive Security]]></category>
      <category><![CDATA[Vulnerability Research]]></category>
      <category><![CDATA[Security Engineering]]></category>
      <category><![CDATA[Responsible Disclosure]]></category>
    </item>
    <item>
      <title><![CDATA[The Action Pause: A 10-Second Habit for AI-Era Impersonation]]></title>
      <link>https://scottaltiparmak.com/blog/the-action-pause-framework</link>
      <guid isPermaLink="true">https://scottaltiparmak.com/blog/the-action-pause-framework</guid>
      <description><![CDATA[A behavioral framework for AI-era impersonation across email, voice, video, chat, and in-person asks. Empirically grounded in 2,511 classifications from the Threat Terminal study. Trigger on the action request, not on the content.]]></description>
      <pubDate>Tue, 21 Apr 2026 00:00:00 GMT</pubDate>
      <category><![CDATA[Research]]></category>
      <category><![CDATA[Phishing]]></category>
      <category><![CDATA[AI]]></category>
      <category><![CDATA[Security Awareness]]></category>
      <category><![CDATA[Threat Terminal]]></category>
      <category><![CDATA[Social Engineering]]></category>
    </item>
    <item>
      <title><![CDATA[Everyone's Talking About Mythos. My Wife Is Still Talking About the TV.]]></title>
      <link>https://scottaltiparmak.com/blog/i-let-claude-hack-my-home-network</link>
      <guid isPermaLink="true">https://scottaltiparmak.com/blog/i-let-claude-hack-my-home-network</guid>
      <description><![CDATA[Anthropic's Mythos Preview report measures the model I can actually run. So this weekend, I ran it on my house. Here is what Opus 4.6 did.]]></description>
      <pubDate>Tue, 14 Apr 2026 00:00:00 GMT</pubDate>
      <category><![CDATA[AI]]></category>
      <category><![CDATA[Agentic AI]]></category>
      <category><![CDATA[Offensive Security]]></category>
      <category><![CDATA[Security Engineering]]></category>
      <category><![CDATA[IoT Security]]></category>
      <category><![CDATA[Claude]]></category>
    </item>
    <item>
      <title><![CDATA[What 1,011 Cybersecurity Jobs Actually Ask For]]></title>
      <link>https://scottaltiparmak.com/blog/what-1011-cybersecurity-jobs-actually-ask-for</link>
      <guid isPermaLink="true">https://scottaltiparmak.com/blog/what-1011-cybersecurity-jobs-actually-ask-for</guid>
      <description><![CDATA[I pulled 1,011 live cybersecurity postings and enriched them with an LLM. CISSP dominates, entry-level is a mirage, remote work is mostly gone, and half of employers still won't post a salary.]]></description>
      <pubDate>Fri, 10 Apr 2026 00:00:00 GMT</pubDate>
      <category><![CDATA[Career]]></category>
      <category><![CDATA[Cybersecurity]]></category>
      <category><![CDATA[Data]]></category>
      <category><![CDATA[Hiring]]></category>
    </item>
    <item>
      <title><![CDATA[How Cybersecurity Teams Actually Use AI: What I Told Students at PBSC]]></title>
      <link>https://scottaltiparmak.com/blog/pbsc-cyber-symposium-how-security-teams-use-ai</link>
      <guid isPermaLink="true">https://scottaltiparmak.com/blog/pbsc-cyber-symposium-how-security-teams-use-ai</guid>
      <description><![CDATA[I spoke at Palm Beach State College's Cybersecurity Symposium on how security teams use AI in practice and what students can do right now to prepare.]]></description>
      <pubDate>Fri, 03 Apr 2026 00:00:00 GMT</pubDate>
      <category><![CDATA[Speaking]]></category>
      <category><![CDATA[AI]]></category>
      <category><![CDATA[Career]]></category>
      <category><![CDATA[Students]]></category>
    </item>
    <item>
      <title><![CDATA[Preliminary Findings: How Humans Detect AI-Generated Phishing Across 2,511 Classifications]]></title>
      <link>https://scottaltiparmak.com/blog/preliminary-findings-ai-phishing-detection-153-participants</link>
      <guid isPermaLink="true">https://scottaltiparmak.com/blog/preliminary-findings-ai-phishing-detection-153-participants</guid>
      <description><![CDATA[Findings from 153 participants classifying AI-generated phishing: technique-level bypass rates, overconfidence patterns, and what security training misses.]]></description>
      <pubDate>Mon, 30 Mar 2026 00:00:00 GMT</pubDate>
      <category><![CDATA[Research]]></category>
      <category><![CDATA[Phishing]]></category>
      <category><![CDATA[AI]]></category>
      <category><![CDATA[Threat Terminal]]></category>
      <category><![CDATA[Security Awareness]]></category>
    </item>
    <item>
      <title><![CDATA[Why Game Mechanics Work for Security Training (and Why Most Vendors Get It Wrong)]]></title>
      <link>https://scottaltiparmak.com/blog/why-game-mechanics-work-for-security-training</link>
      <guid isPermaLink="true">https://scottaltiparmak.com/blog/why-game-mechanics-work-for-security-training</guid>
      <description><![CDATA[Most gamified security training is a quiz with a badge. Real game design looks fundamentally different, and it matters for engagement and measurement.]]></description>
      <pubDate>Sun, 29 Mar 2026 00:00:00 GMT</pubDate>
      <category><![CDATA[Security Awareness]]></category>
      <category><![CDATA[Game Design]]></category>
      <category><![CDATA[Phishing]]></category>
      <category><![CDATA[Research]]></category>
    </item>
    <item>
      <title><![CDATA[Threat Terminal v2.0: PvP Is Here]]></title>
      <link>https://scottaltiparmak.com/blog/threat-terminal-v2-pvp-is-here</link>
      <guid isPermaLink="true">https://scottaltiparmak.com/blog/threat-terminal-v2-pvp-is-here</guid>
      <description><![CDATA[Real-time 1v1 ranked matches, a new unlock ladder, and a terminal AI that will not stop talking. Threat Terminal v2.0 goes live tonight.]]></description>
      <pubDate>Fri, 27 Mar 2026 00:00:00 GMT</pubDate>
      <category><![CDATA[Phishing]]></category>
      <category><![CDATA[Security Awareness]]></category>
      <category><![CDATA[Research]]></category>
      <category><![CDATA[AI]]></category>
    </item>
    <item>
      <title><![CDATA[What's Coming in Threat Terminal v2]]></title>
      <link>https://scottaltiparmak.com/blog/threat-terminal-v2-whats-coming</link>
      <guid isPermaLink="true">https://scottaltiparmak.com/blog/threat-terminal-v2-whats-coming</guid>
      <description><![CDATA[What is changing in Threat Terminal v2: complete UI overhaul, persistent progression, daily challenges, ranked PvP, badges, and a coin economy.]]></description>
      <pubDate>Tue, 24 Mar 2026 00:00:00 GMT</pubDate>
      <category><![CDATA[Phishing]]></category>
      <category><![CDATA[Security Awareness]]></category>
      <category><![CDATA[Research]]></category>
      <category><![CDATA[AI]]></category>
    </item>
    <item>
      <title><![CDATA[100 Participants: Preliminary Patterns Before the Real Analysis]]></title>
      <link>https://scottaltiparmak.com/blog/100-participants-initial-findings</link>
      <guid isPermaLink="true">https://scottaltiparmak.com/blog/100-participants-initial-findings</guid>
      <description><![CDATA[Preliminary descriptive patterns from 100 participants and 1,612 classified emails in Threat Terminal, before formal statistical analysis begins.]]></description>
      <pubDate>Fri, 20 Mar 2026 00:00:00 GMT</pubDate>
      <category><![CDATA[Research]]></category>
      <category><![CDATA[Phishing]]></category>
      <category><![CDATA[AI]]></category>
      <category><![CDATA[Threat Terminal]]></category>
    </item>
    <item>
      <title><![CDATA[Pilot Data: Which Phishing Techniques Actually Fool People?]]></title>
      <link>https://scottaltiparmak.com/blog/pilot-data-which-phishing-techniques-fool-people</link>
      <guid isPermaLink="true">https://scottaltiparmak.com/blog/pilot-data-which-phishing-techniques-fool-people</guid>
      <description><![CDATA[Pilot data from 56 participants in Threat Terminal reveals which phishing techniques humans miss most when AI eliminates writing quality as a signal.]]></description>
      <pubDate>Sun, 15 Mar 2026 00:00:00 GMT</pubDate>
      <category><![CDATA[Phishing]]></category>
      <category><![CDATA[AI]]></category>
      <category><![CDATA[Security Awareness]]></category>
      <category><![CDATA[Research]]></category>
    </item>
    <item>
      <title><![CDATA[Fluent Prose: The Phishing Technique Security Training Ignores]]></title>
      <link>https://scottaltiparmak.com/blog/fluent-prose-the-phishing-technique-training-ignores</link>
      <guid isPermaLink="true">https://scottaltiparmak.com/blog/fluent-prose-the-phishing-technique-training-ignores</guid>
      <description><![CDATA[Phishing emails with no urgency, no threats, and no red flags bypass humans at three times the rate of credential harvesting. Training has it backwards.]]></description>
      <pubDate>Sun, 15 Mar 2026 00:00:00 GMT</pubDate>
      <category><![CDATA[Phishing]]></category>
      <category><![CDATA[AI]]></category>
      <category><![CDATA[Security Awareness]]></category>
      <category><![CDATA[Research]]></category>
    </item>
    <item>
      <title><![CDATA[Your Best Phishing Defense Is Context, Not Analysis]]></title>
      <link>https://scottaltiparmak.com/blog/phishing-contextual-signals</link>
      <guid isPermaLink="true">https://scottaltiparmak.com/blog/phishing-contextual-signals</guid>
      <description><![CDATA[Most people catch phishing because they know they do not have an Apple account, not because they spotted a spoofed domain. That distinction matters.]]></description>
      <pubDate>Fri, 13 Mar 2026 00:00:00 GMT</pubDate>
      <category><![CDATA[Phishing]]></category>
      <category><![CDATA[Security Awareness]]></category>
      <category><![CDATA[Research]]></category>
    </item>
    <item>
      <title><![CDATA[What Happens When AI Makes Every Phishing Email Perfect?]]></title>
      <link>https://scottaltiparmak.com/blog/what-happens-when-ai-makes-every-phishing-email-perfect</link>
      <guid isPermaLink="true">https://scottaltiparmak.com/blog/what-happens-when-ai-makes-every-phishing-email-perfect</guid>
      <description><![CDATA[AI eliminated the grammar errors and broken formatting phishing training taught people to spot. The detection problem is now fundamentally different.]]></description>
      <pubDate>Wed, 11 Mar 2026 00:00:00 GMT</pubDate>
      <category><![CDATA[Phishing]]></category>
      <category><![CDATA[AI]]></category>
      <category><![CDATA[Security Awareness]]></category>
      <category><![CDATA[Research]]></category>
    </item>
    <item>
      <title><![CDATA[Building a Controlled Phishing Detection Dataset at Scale with the Claude API]]></title>
      <link>https://scottaltiparmak.com/blog/building-phishing-detection-dataset-claude-api</link>
      <guid isPermaLink="true">https://scottaltiparmak.com/blog/building-phishing-detection-dataset-claude-api</guid>
      <description><![CDATA[How I built a controlled phishing dataset with the Claude API: batching by technique, automated review, and handling rate limits at scale.]]></description>
      <pubDate>Mon, 09 Mar 2026 00:00:00 GMT</pubDate>
      <category><![CDATA[AI]]></category>
      <category><![CDATA[Phishing]]></category>
      <category><![CDATA[Research]]></category>
      <category><![CDATA[Security Awareness]]></category>
      <category><![CDATA[Claude API]]></category>
    </item>
    <item>
      <title><![CDATA[Building Threat Terminal: What Actually Went Wrong]]></title>
      <link>https://scottaltiparmak.com/blog/building-retro-phish-what-went-wrong</link>
      <guid isPermaLink="true">https://scottaltiparmak.com/blog/building-retro-phish-what-went-wrong</guid>
      <description><![CDATA[Decisions, pivots, and problems behind designing a phishing research study, and why the constraints produced a cleaner methodology than planned.]]></description>
      <pubDate>Sun, 08 Mar 2026 00:00:00 GMT</pubDate>
      <category><![CDATA[Phishing]]></category>
      <category><![CDATA[Security Awareness]]></category>
      <category><![CDATA[Research]]></category>
      <category><![CDATA[AI]]></category>
    </item>
    <item>
      <title><![CDATA[I Turned MITRE ATT&CK Into a Tarot Deck]]></title>
      <link>https://scottaltiparmak.com/blog/threat-intelligence-tarot</link>
      <guid isPermaLink="true">https://scottaltiparmak.com/blog/threat-intelligence-tarot</guid>
      <description><![CDATA[Threat intelligence does not have a quality problem. It has an attention problem. Here is what I built to fix that.]]></description>
      <pubDate>Fri, 06 Mar 2026 00:00:00 GMT</pubDate>
      <category><![CDATA[Threat Intelligence]]></category>
      <category><![CDATA[MITRE ATT&CK]]></category>
      <category><![CDATA[Projects]]></category>
    </item>
    <item>
      <title><![CDATA[I'm Running a Phishing Research Study Inside a Retro Terminal Game]]></title>
      <link>https://scottaltiparmak.com/blog/retro-phish-research</link>
      <guid isPermaLink="true">https://scottaltiparmak.com/blog/retro-phish-research</guid>
      <description><![CDATA[When AI eliminates grammar errors as a detection signal, the question becomes: which phishing techniques produce the biggest gaps in human detection?]]></description>
      <pubDate>Wed, 04 Mar 2026 00:00:00 GMT</pubDate>
      <category><![CDATA[Phishing]]></category>
      <category><![CDATA[Security Awareness]]></category>
      <category><![CDATA[Research]]></category>
      <category><![CDATA[AI]]></category>
    </item>
    <item>
      <title><![CDATA[Why Your Entra Tenant Probably Has Orphaned Apps with Live Credentials]]></title>
      <link>https://scottaltiparmak.com/blog/why-your-entra-tenant-has-orphaned-apps</link>
      <guid isPermaLink="true">https://scottaltiparmak.com/blog/why-your-entra-tenant-has-orphaned-apps</guid>
      <description><![CDATA[Enterprise Entra tenants accumulate years of vendor integrations, abandoned POCs, and forgotten service principals. Most have never been audited.]]></description>
      <pubDate>Sat, 28 Feb 2026 00:00:00 GMT</pubDate>
      <category><![CDATA[Identity]]></category>
      <category><![CDATA[Entra ID]]></category>
      <category><![CDATA[IAM]]></category>
      <category><![CDATA[Security Engineering]]></category>
    </item>
    <item>
      <title><![CDATA[Security Is Applied IT]]></title>
      <link>https://scottaltiparmak.com/blog/security-is-applied-it</link>
      <guid isPermaLink="true">https://scottaltiparmak.com/blog/security-is-applied-it</guid>
      <description><![CDATA[Most people break into cybersecurity the wrong way. Here is what I actually tell people who ask me how to get started.]]></description>
      <pubDate>Sat, 28 Feb 2026 00:00:00 GMT</pubDate>
      <category><![CDATA[Career]]></category>
      <category><![CDATA[Getting Started]]></category>
      <category><![CDATA[Cybersecurity]]></category>
    </item>
    <item>
      <title><![CDATA[Offensive Security Makes You a Better Defender]]></title>
      <link>https://scottaltiparmak.com/blog/offensive-security-makes-you-a-better-defender</link>
      <guid isPermaLink="true">https://scottaltiparmak.com/blog/offensive-security-makes-you-a-better-defender</guid>
      <description><![CDATA[Security analysts who never touch offensive work are missing something. You cannot fully defend what you have never tried to break.]]></description>
      <pubDate>Sat, 20 Dec 2025 00:00:00 GMT</pubDate>
      <category><![CDATA[Defense]]></category>
      <category><![CDATA[Offensive Security]]></category>
      <category><![CDATA[Career]]></category>
      <category><![CDATA[Blue Team]]></category>
    </item>
    <item>
      <title><![CDATA[Breaking Into Cybersecurity: A Roadmap for Students]]></title>
      <link>https://scottaltiparmak.com/blog/breaking-into-cybersecurity-a-roadmap-for-students</link>
      <guid isPermaLink="true">https://scottaltiparmak.com/blog/breaking-into-cybersecurity-a-roadmap-for-students</guid>
      <description><![CDATA[Cybersecurity is not truly entry-level without serious effort outside the classroom. Here is a nine-step roadmap I wish someone had handed me.]]></description>
      <pubDate>Fri, 30 May 2025 00:00:00 GMT</pubDate>
      <category><![CDATA[Career]]></category>
      <category><![CDATA[Students]]></category>
      <category><![CDATA[Cybersecurity]]></category>
    </item>
  </channel>
</rss>