The author
About
Developer and cybersecurity specialist. Trained at ITIS E. Barsanti, with a Cyber Security specialisation at ITS Digital Academy in Treviso. Drawn to offensive security: CTFs and Hack The Box. Here I turn that same lens around — understanding how an attack works in order to explain how it's stopped.
What HACK/PROJECT is
HACK/PROJECT publishes a daily analysis of a real cyber attack: origin, attack chain mapped to MITRE ATT&CK, detection and remediation. Every dossier ships in Italian and English, and becomes a vertical video on TikTok.
Primary sources, always
CISA, FBI and NCSC advisories. Reports from the vendors who ran the incident response. Official MITRE pages. Two independent sources minimum per dossier. ATT&CK technique IDs are copied from advisories, never inferred.
Uncertainty gets stated
Where attribution is disputed, where a source stands alone, where a CVSS hasn't been validated yet: we say so inside the article. A threat intelligence site that fakes certainty it doesn't have is worth less than nothing.
Defensive, not offensive
We describe tactics and techniques at the same level of detail as a public advisory. We don't distribute exploit code or reusable payloads: an attack chain told well teaches more than the payload does.
Corrections get stated
If a dossier changes after publication — a source retracts, a CVSS is revised, an attribution collapses — the correction is written into the dossier, with its date, and the page shows when it was updated. We don't rewrite history quietly. Error reports are welcome by email.
How these dossiers are made
Research and drafting are AI-assisted, and the video narration is synthetic — declared as such on TikTok too. The rule that admits no exception is the one above: every published fact is verified against the primary sources cited at the foot of the page, and ATT&CK IDs are copied from advisories. What isn't automated is accountability: the mistakes are mine.
Get in touch
Tips, corrections, dossiers worth covering.