Analysis

Analysis, reports, and opinion that look beyond individual incidents. We examine trends, tactics, and sector-wide risks; connect dots across cases; and publish periodic research and explainers. Expect context, data-driven takeaways, and clear points of view to help readers understand what matters, why it happened, and what to watch next.

The Black Knight Breach That Never Was

How a Reddit theory, CTI echo chamber, and a vanished article show why cyber “incidents” need verification

By Joseph Topping

/ 24 Nov 2025

A row of tall black server cabinets with green and blue status lights in a dimly lit data center corridor.

After the Breach: Wexford County, Michigan

A year of lost records, stalled home sales, and hard lessons in local government cybersecurity

By Joseph Topping

/ 10 Nov 2025

Front view of the Wexford County Courthouse in Cadillac, Michigan, showing a brick and stone building with tall columns, a U.S. flag flying in front, and trees framing the scene.

Opinion: We followed PTOE’s “DNS attack” claim. The evidence isn’t there.

PR-wire hack claim meets stable DNS records, conflicting details, and a bounced press inbox.

By DysruptionHub Staff

/ 16 Oct 2025

A teal padlock over a blue screen of scrolling code, symbolizing cybersecurity and site protection.

Twelve Months of Disruption: How Cyberattacks Tested U.S. Emergency Response

Guest contribution by Joseph Topping, security researcher. The views expressed are solely the author’s and do not represent any employer, agency, or organization. He writes in a personal capacity

By Joseph Topping

/ 16 Sep 2025

Twelve Months of Disruption: How Cyberattacks Tested U.S. Emergency Response