Tony Muzo

I build security automation, threat intelligence reports, and cloud defense tooling.

Security Engineer

Automation Builder

Threat Intel Writer

Threat Intelligence

Profiling ransomware groups, mapping adversary TTPs, and producing high‑impact intelligence that drives defensive engineering.

Security Automation

Building tooling and pipelines that eliminate manual workload, accelerate investigations, and strengthen SOC efficiency.

Detection & Incident Response

Developing detections, coordinating incident response workflows, and translating complex attacker behavior into actionable defense.

// selected_work

Selected Work

A few of my security engineering, automation, and threat intelligence projects.

// latest_writing

Latest Writing

Cybersecurity notes, operator commentary, and practical defensive engineering essays.

CISA: Microsoft SharePoint RCE flaw now actively exploited

Active SharePoint RCE exploit requires immediate, prioritized patching and validation.

Over 900 Oracle E-Business instances exposed to ongoing attacks

Identify and secure critical Oracle EBS systems immediately, as attacks are active.

Insurance giant Aflac discloses data breach after subsidiary hack

Subsidiary breaches carry significant, complex international regulatory and financial risks.

// signal_sources

Mentions

Tooling and research aligned with the platforms and standards I work across every day.

GitHub
SANS Institute
Wazuh
Cisco Secure
OffSec