Things I build, break, fix, and write about

7 November 2026
Prioritising Microsoft Patch Tuesday August 2026

Microsoft Patch Tuesday August 2026 is one of those releases where the order matters more than the headline count. I would patch the exploited flaw first, then the network-facing RCEs, and only then worry about the tidier backlog.

7 November 2026
Brand abuse detection for checkout page impersonation

Checkout impersonation is often cleaner than people expect, and that is the problem. Once a phishing framework starts swapping content at runtime, the...

7 November 2026
Security Advisory – 07 Nov 2026

Daily security advisory summary for 07 Nov 2026

6 November 2026
SMS lures and exploit trends in triage

SMS lures tell you more than the brand name ever will, and the same goes for threat intelligence newsletters if you read past the noise. I care less...

Latest blog posts you might like

24 May 2026
Detecting node contention with Pressure Stall Information

Kubernetes PSI metrics are useful because they show waiting, not just work, and that is where the awkward node problems usually hide. I trust them more than busy-looking charts, but only after I have...

24 May 2026
Topology-aware scheduling with PodGroup and DRA

Kubernetes PodGroup scheduling only makes sense once you stop treating the group as a template trick and start treating it as live state. I like that split, because it forces the scheduler to deal...

23 May 2026
Kubernetes Service externalIPs deprecation and replacements

Kubernetes Service externalIPs has always been a bit too trusting for my taste, and 1.36 finally starts treating it that way. If you still rely on it, now is the time to move the address ownership...

23 May 2026
Mixed Version Proxy during Kubernetes 1.36 upgrades

Kubernetes Mixed Version Proxy is one of those fixes you only notice when it is missing. During a 1.36 control plane upgrade, it stops an older API server from handing out tidy little lies, the sort...

22 May 2026
Weekly Tech Digest | 22 May 2026

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.

22 May 2026
Measuring route_controller_route_sync_total in Kubernetes

`route_controller_route_sync_total` is the sort of metric I trust only when I put it next to real node activity. By itself it tells you little; alongside churn, it shows whether the route controller...

22 May 2026
Incident response after GitHub code exposure

A GitHub internal repositories breach rarely starts with the code itself, it starts with a weak boundary and ends in places people forgot to check. I care less about the headlines than the tokens,...

21 May 2026
Rebuild WinRE trust after CVE-2026-33825 changes

BitLocker zero-day mitigations are easy to half-apply and then forget, which is exactly how trouble lingers. I had to rebuild WinRE trust after CVE-2026-33825 changes, because removing autofstx.exe is...

21 May 2026
Malicious VS Code extensions and workstation compromise

Malicious VS Code extensions do not need to look suspicious to do damage. I care less about the marketplace listing and more about what the thing can reach once it is installed, because that is where...

20 May 2026
Arch Linux PinTheft patch validation steps

PinTheft Arch Linux root escalation is only interesting if the kernel still exposes RDS, so I start there, not with exploit code. If the patched build really closes the hole, it should fail cleanly,...