<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Moses Nueman III</title><description>Senior security engineer with 8+ years across detection engineering, IR, threat hunting, and cloud. These days focused on detection engineering at scale and the security of LLMs and the agents built on top of them.</description><link>https://attackthealgorithm.com/</link><item><title>AI Security: Securing the Everyday Model</title><link>https://attackthealgorithm.com/posts/ai-security-everyday-model/</link><guid isPermaLink="true">https://attackthealgorithm.com/posts/ai-security-everyday-model/</guid><description>The model your team shipped last quarter is now a production attack surface. A field guide to threat-modeling LLM features without slowing the org down.</description><pubDate>Sat, 18 Apr 2026 00:00:00 GMT</pubDate></item><item><title>Detection Engineering: Writing Rules That Don&apos;t Page You at 3am</title><link>https://attackthealgorithm.com/posts/detection-engineering-rules-that-dont-page/</link><guid isPermaLink="true">https://attackthealgorithm.com/posts/detection-engineering-rules-that-dont-page/</guid><description>Most SIEM rules are written by people who don&apos;t have to respond to them. Here&apos;s a framework for writing detections that earn their pages.</description><pubDate>Sun, 22 Mar 2026 00:00:00 GMT</pubDate></item></channel></rss>