Things I build, break, fix, and write about

5 November 2026
Embedded payloads in trojanised PDF viewers

Modified PDF viewers are a neat little delivery trick because they look like ordinary job bait until someone opens them. I keep coming back to the same point, the file name is not the danger, the loader path is; that is where the unwanted code slips in.

5 November 2026
Ransomware group fragmentation and detection priorities

Ransomware group fragmentation means the label matters less than the behaviour, and I trust activity over reputation every time. A small crew with...

5 November 2026
Security Advisory – 05 Nov 2026

Daily security advisory summary for 05 Nov 2026

4 November 2026
Linux kernel net/sched UAF constraints on CentOS 9 desktop

Linux kernel net/sched use-after-free looks messy on paper, and on CentOS 9 Desktop it is worse, because the obvious paths are blocked and the useful...

Latest blog posts you might like

21 September 2026
KYAML and YAML type coercion in Kubernetes

Kubernetes has a habit of accepting YAML that looks right and means something else entirely. KYAML is the stricter answer I wish I had earlier, with quoted strings and explicit flow style doing the...

21 September 2026
Gmail access through stolen Google Workspace OAuth tokens

A stolen Google Workspace OAuth tokens grant can outlive a password reset and keep reading mail quietly, which is the bit I dislike most. If it reaches Drive or a connected app, the damage is rarely...

21 September 2026
Weekly Tech Digest | 21 Sep 2026

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.

20 September 2026
macOS remote access abuse via VNC credential bypass

macOS Screen Sharing looks harmless until TCP 5900 is left open, then the macOS Screen Sharing authentication bypass turns a convenience into an entry point. I would not keep that service facing the...

20 September 2026
Fraud detection gaps in payment processing hand-offs

A bad update in a payment path is not just a glitch, it can be a route into customer accounts, and I have seen how quickly that gets ugly. The awkward bit with service provider transaction fraud is...

19 September 2026
AI text watermarking: where detection fails

AI text watermarking sounds neat until you hit short replies, exact wording, and code, where the signal thins out fast. I have seen enough systems fail at the edges to know the awkward bit is usually...

19 September 2026
SOCKS5 relay abuse on routers and attribution gaps

Exposed routers make tidy little relay nodes, which is why SOCKS5 relay abuse keeps turning up in places that should have been boring. The hard bit is not spotting the box, it is untangling the...

18 September 2026
Boundary design for water sector OT networks

Boundary design in water sector OT is where secure connectivity principles stop sounding neat and start mattering. I care less about tidy diagrams than about the point where a path can actually hurt...

18 September 2026
Availability trade-offs in private 5G RAN design

Private 5G deployments look neat until one site, one link or one timing source takes the strain. I care less about the brochure and more about what happens when backhaul fades, certificates expire, or...

17 September 2026
Require a BitLocker pre-boot PIN

TPM-only BitLocker is tidy until you remember what is left exposed when the machine can unlock itself. BitLocker PINs are the small, awkward step that makes a stolen laptop less cooperative, and I...