Zero Security Theatre
Evidence library
These sources support or challenge the work. Each note says what the source can establish, and contrary evidence stays in the library.
Advisory
CISA Known Exploited Vulnerabilities catalogue
A public record of what is actually being exploited, useful for separating theoretical from observed risk.
Used by The dangers of security theatre
Reference
MITRE ATT&CK
The behaviour catalogue used to select techniques for detection and containment measurement.
Used by The dangers of security theatre, Attack-and-recovery engineering
Reference
MITRE ATLAS, adversarial threat landscape for AI systems
Relevant as AI components enter both the defensive stack and the attack surface.
Used by AI-native defensive security
Public report
Verizon Data Breach Investigations Report
Annual incident pattern data. Useful for base rates, with the usual caution that the sample is not a population.
Used by The dangers of security theatre, Vendor and supply-chain resilience