EDITORIAL
Editorial
Long-form notes from our practice. Detection engineering, disclosure ethics, and field observations from work on financial-sector security. No how-tos, no thought leadership, no announcements.
EDITORIAL · 2026-04-01
Detection engineering against low-and-slow operations
When the dwell time is measured in months rather than minutes, the detection problem stops being about signatures and becomes about baselines. Notes from a year of working financial-sector telemetry.
By IMF Research
EDITORIAL · 2026-03-15On disclosure timelines: when ninety days is too long, when it is too short
The default coordinated-disclosure window of ninety days exists for reasons that are sometimes load-bearing and sometimes vestigial. A practitioner's view from inside financial-sector vulnerability work.
By IMF Research