AuthorCISSP

Eric Bang – Founder & Cybersecurity Evangelist

Founder & Cybersecurity Evangelist

Decryption Digest

Eric Bang is a cybersecurity analyst specializing in CVE analysis, vulnerability intelligence, and threat research. He is a CISSP-certified professional and the founder of Decryption Digest, a high-signal threat intelligence publication read by over 50,000 security engineers, SOC analysts, CISOs, and IT administrators every morning.

Eric translates complex vulnerability disclosures, ransomware campaigns, and nation-state operations into clear, actionable intelligence. His research spans zero-day analysis, BYOVD attack chains, supply chain compromise events, and critical CVEs affecting enterprise infrastructure, always with a focus on what security teams can do right now.

Connect on LinkedIn Subscribe to the Newsletter

Credentials

CISSP

Certified Information Systems Security Professional, ISC²

Founder

Decryption Digest: Cybersecurity threat intelligence for 50,000+ professionals

Coverage

Zero-days, ransomware campaigns, nation-state operations, and critical CVEs

Security Educator

Author of 700+ practitioner guides, buyer's guides, and CVE analyses covering every major domain of enterprise cybersecurity.

Areas of Expertise

◈CVE Analysis◈Threat Intelligence◈Vulnerability Research◈Zero-Day Analysis◈Ransomware Operations◈Nation-State Attribution◈Incident Response◈Enterprise Security Architecture◈Cloud Security◈Compliance Frameworks◈Detection Engineering◈Security Program Design

Research Topics

CVE Analysis & Vulnerability Intelligence

In-depth technical breakdowns of critical CVEs: covering exploit mechanics, CVSS scoring, affected versions, and step-by-step remediation.

Microsoft Vulnerability Research

Analysis of high-impact Microsoft CVEs exploited in the wild: from Exchange Server vulnerabilities to Windows kernel zero-days.

Active Directory & Identity Attacks

Domain privilege escalation, credential theft, Kerberos abuse, and AD Certificate Services exploits: the most common post-exploitation path in enterprise environments.

Network Infrastructure & Zero-Day Research

Critical vulnerabilities in VPN appliances, firewalls, and remote access infrastructure actively exploited by nation-state actors and ransomware groups.

Ransomware Operations & EDR Evasion

Technical analysis of ransomware group attack chains: BYOVD driver abuse, EDR silencing, double-extortion tactics, and initial access broker relationships.

Practitioner Guides & Buyer's Guides

In-depth practitioner guides and vendor comparison resources for security teams evaluating tools and building security programs.

Recent Articles

View all →

HOW-TO GUIDEOctober 8, 202610 min

DNS Security Best Practices for Enterprise Environments

DNS is involved in 91% of malware attacks and is the primary communication channel for C2 beaconing, DNS tunneling exfiltration, and domain generation algorithm (DGA) campaigns. This guide covers the DNS security controls that close those attack channels and the telemetry that makes DNS a high-value detection source.

HOW-TO GUIDEOctober 1, 202610 min

How to Detect and Prevent Business Email Compromise

BEC cost organizations $2.9 billion in reported losses in 2023, and most of those losses happened despite email security gateways being deployed. Gateway-based controls catch malware and phishing links. BEC attacks typically contain neither. This guide covers the detection and prevention controls specific to BEC.

HOW-TO GUIDESeptember 24, 202611 min

How to Implement DevSecOps: A Practitioner's Guide

Most DevSecOps implementations fail not because of tooling gaps but because security gates are added to pipelines without developer buy-in, blocking deploys on false positives and creating adversarial relationships between security and engineering. This guide covers the integration pattern that produces security coverage developers do not route around.

HOW-TO GUIDESeptember 24, 202612 min

How to Respond to a Zero-Day Vulnerability Affecting Your Organization

When a zero-day is announced with active exploitation in the wild, the next 72 hours determine whether your organization is a victim or a defender. This guide provides the response workflow that reduces exposure during the window between disclosure and patching.

HOW-TO GUIDESeptember 17, 202611 min

Kubernetes Security Best Practices for Production Environments

Kubernetes provides powerful security primitives, RBAC, network policies, pod security admission, secrets encryption, that most clusters do not have configured correctly. This guide covers the specific configurations that close the most common Kubernetes attack paths.

HOW-TO GUIDESeptember 17, 202610 min

How to Build a Vulnerability Disclosure Program or Bug Bounty

A vulnerability disclosure program is no longer optional for organizations with an internet-facing attack surface, it is how researchers tell you about your vulnerabilities before attackers exploit them. This guide covers how to structure a VDP or bug bounty that researchers actually use and security teams can operationalize.

Get threat intelligence in your inbox

Join 50,000+ security professionals reading Decryption Digest, free, every morning.

Subscribe Free