Things I build, break, fix, and write about

5 November 2026
Embedded payloads in trojanised PDF viewers

Modified PDF viewers are a neat little delivery trick because they look like ordinary job bait until someone opens them. I keep coming back to the same point, the file name is not the danger, the loader path is; that is where the unwanted code slips in.

5 November 2026
Ransomware group fragmentation and detection priorities

Ransomware group fragmentation means the label matters less than the behaviour, and I trust activity over reputation every time. A small crew with...

5 November 2026
Security Advisory – 05 Nov 2026

Daily security advisory summary for 05 Nov 2026

4 November 2026
Linux kernel net/sched UAF constraints on CentOS 9 desktop

Linux kernel net/sched use-after-free looks messy on paper, and on CentOS 9 Desktop it is worse, because the obvious paths are blocked and the useful...

Latest blog posts you might like

18 August 2026
CVE-2020-8561 and DNS proxy TOCTOU risk

CVE-2020-8561 is the sort of Kubernetes CVE records problem I trust least, because the bug is in the behaviour, not a neat patched release. If your tooling only reads version fields, it can miss the...

17 August 2026
Weekly Tech Digest | 17 Aug 2026

Weekly Tech Digest – 17-08-2026 In the ever-evolving world of technology, staying updated is crucial. This week’s digest brings you the latest in network security and cybersecurity podcasts,...

10 August 2026
Weekly Tech Digest | 10 Aug 2026

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.

3 August 2026
Weekly Tech Digest | 03 Aug 2026

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.

2 August 2026
paperless-ngx | v3.0.5

paperless-ngx v3.0.5 released on 01-08-2026 paperless-ngx v3.0.5 is out now. It restores expected search parsing and interaction, polishes several frontend and viewer behaviours, and tightens AI...

29 July 2026
Headlamp in-cluster deployment and RBAC boundaries

Headlamp in-cluster deployment only makes sense when the UI belongs inside the cluster, and even then the service account should be painfully narrow. I trust the boundary, not the person using it on a...

28 July 2026
Marketplace takedown pressure on vendor operations

Marketplace takedowns do more than pull a site offline, they cut through the vendor routines that keep sales moving. In dark web marketplaces, that means lost trust, broken escrow, and a hurried...

28 July 2026
Brickstorm persistence in Microsoft 365

Brickstorm showed how Microsoft 365 persistence can survive a tidy password reset and a few blocked logins. I keep coming back to the same point, if identity, VPN and odd little appliances all line up...

27 July 2026
Restricting Serv-U access before patching

The SolarWinds Serv-U flaw is the sort of bug that turns a routine patch into an ugly afternoon, so I would block the obvious request pattern first and keep exposure tight. If the service can be...

27 July 2026
Weekly Tech Digest | 27 Jul 2026

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.