dwell-time

The 22-Month Window: How Vercel's Upstream Analytics Bridge Was Compromised

John Z Black Apr 21, 2026

Incidents & Breaches #supply-chain #oauth #dwell-time #vercel #cloud-security

Vercel recently disclosed a major security incident via Context.ai that began in June 2024. For nearly two years, an invisible door was held open into the core of their cloud identity. It is a masterclass in the hidden risks of 'harmless' SaaS analytics.

The Progress We Thought We Were Making Against Hackers? It Just Went Backward.

John Z Black Mar 30, 2026

Threat Intelligence #m-trends #dwell-time #mandiant #espionage #ransomware #north-korea #threat-intelligence

Dwell time reversed in 2025, and the reason why tells you exactly which threats most security programs are not built to catch.

M-Trends 2026: The 22-Second Stat Everyone Is Misreading

John Z Black Mar 24, 2026

Security Operations & Resilience #m-trends #mandiant #ransomware #incident-response #dwell-time #initial-access-brokers #recovery-denial

Mandiant's M-Trends 2026 report is getting misquoted everywhere. The 22-second ransomware handoff is real -- but it's not what you think, and the dwell time stat buried in the report is scarier.