Writeups
Right verdict, wrong reason
Threat intel pushed a real phish to a raw score of 120 by judging Google Cloud Storage's reputation instead of the link, and the same flaw later turned a classmate's hijacked-account scam from 35 into 90.
Authenticated is not aligned
SPF and DKIM both passed and the email was still a phish. Then 15 real emails from my own inbox showed exactly where header checks stop working.
What 3,500 brute-force attempts in 24 hours look like
One exposed VM, one day, more than 3,500 failed logons. Almost all of them came from a single address, which changes what the right defense is.