Things I build, break, fix, and write about

6 November 2026
SMS lures and exploit trends in triage

SMS lures tell you more than the brand name ever will, and the same goes for threat intelligence newsletters if you read past the noise. I care less about the drama than the controls it points to, because that is where the damage gets stopped.

6 November 2026
Business continuity planning for port cyberattack response

Ports do not get to pretend a port cyberattack response will be tidy. I have seen enough homelab recovery to know the ugly bit is always the first...

6 November 2026
Security Advisory – 06 Nov 2026

Daily security advisory summary for 06 Nov 2026

5 November 2026
Embedded payloads in trojanised PDF viewers

Modified PDF viewers are a neat little delivery trick because they look like ordinary job bait until someone opens them. I keep coming back to the...

Latest blog posts you might like

23 September 2026
Private by default for workers.dev URLs

Cloudflare Access for Workers finally fixes a mess I have tripped over more than once, where protection lived beside the Worker and drifted the moment a route or workers.dev URL changed. The new model...

22 September 2026
Cloudflare Workers AI with 1,048,576 token context

Cloudflare Workers AI now gives you room to keep the whole mess in view, which is useful when the real problem is continuity, not raw token count. I care more about where the call sits in the flow,...

22 September 2026
Route UDP on Gateway API v1.6 with UDPRoute

Gateway API v1.6 stops UDP feeling like an awkward add-on, but only if the listener, parentRefs, and backendRefs all agree. I like that TCPRoute and UDPRoute are finally stable, though the controller...

21 September 2026
KYAML and YAML type coercion in Kubernetes

Kubernetes has a habit of accepting YAML that looks right and means something else entirely. KYAML is the stricter answer I wish I had earlier, with quoted strings and explicit flow style doing the...

21 September 2026
Gmail access through stolen Google Workspace OAuth tokens

A stolen Google Workspace OAuth tokens grant can outlive a password reset and keep reading mail quietly, which is the bit I dislike most. If it reaches Drive or a connected app, the damage is rarely...

21 September 2026
Weekly Tech Digest | 21 Sep 2026

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.

20 September 2026
macOS remote access abuse via VNC credential bypass

macOS Screen Sharing looks harmless until TCP 5900 is left open, then the macOS Screen Sharing authentication bypass turns a convenience into an entry point. I would not keep that service facing the...

20 September 2026
Fraud detection gaps in payment processing hand-offs

A bad update in a payment path is not just a glitch, it can be a route into customer accounts, and I have seen how quickly that gets ugly. The awkward bit with service provider transaction fraud is...

19 September 2026
AI text watermarking: where detection fails

AI text watermarking sounds neat until you hit short replies, exact wording, and code, where the signal thins out fast. I have seen enough systems fail at the edges to know the awkward bit is usually...

19 September 2026
SOCKS5 relay abuse on routers and attribution gaps

Exposed routers make tidy little relay nodes, which is why SOCKS5 relay abuse keeps turning up in places that should have been boring. The hard bit is not spotting the box, it is untangling the...