Top all-time · #25226
SOC Prime
Company blog · socprime.com/blogsecurity
SOC Prime is the company blog at socprime.com, writing about security. Since 2016, 3 different Hacker News readers have linked it 3 times. It is still writing: the last post was on 2026-11-02, and you can follow it by feed.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
Linked by one commenter as a source on an active threat, a ClickFix campaign that hijacked sites, in a discussion of the Gizmodo breach. Readers use it for threat-intelligence reporting on security incidents.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
SOC Prime correlates logs with 1M+ detections, keeps it private, and reveals the attack faster than AI can do inference
What Hacker News says?
Absolutely wild that a major publisher has been serving malware for this long with seemingly no one at the wheel. Ongoing security incident. Edit: looks like this is an ongoing thing, there's a breach of Ghost CMS[1]. OTOH there's a patch for this, so not sure who's screwing up here. [1] https://socprime.com/active-threats/clickfix-campaign-hijack...
Comment linking /active-threats/clickfix-campaign-hijacks-700-ghost-websites/
on “Gizmodo breached, hosting malware and no action taken for hours”Submitted CloudMensis Detection: New Malware to Steal macOS Users’ Data as a story · 1 points
HN discussionSubmitted Dismantling KillDisk: Reverse of the BlackEnergy Destructive Component as a story · 1 points
HN discussion