Things I build, break, fix, and write about

7 November 2026
Prioritising Microsoft Patch Tuesday August 2026

Microsoft Patch Tuesday August 2026 is one of those releases where the order matters more than the headline count. I would patch the exploited flaw first, then the network-facing RCEs, and only then worry about the tidier backlog.

7 November 2026
Brand abuse detection for checkout page impersonation

Checkout impersonation is often cleaner than people expect, and that is the problem. Once a phishing framework starts swapping content at runtime, the...

7 November 2026
Security Advisory – 07 Nov 2026

Daily security advisory summary for 07 Nov 2026

6 November 2026
SMS lures and exploit trends in triage

SMS lures tell you more than the brand name ever will, and the same goes for threat intelligence newsletters if you read past the noise. I care less...

Latest blog posts you might like

22 November 2025
Assessing Windows 11 compatibility for medical devices

Check Windows 11 compatibility before you upgrade medical devices. Record exact error messages, capture screenshots and event logs, and run TPM and Secure Boot checks. Keep vendor responses and...

22 November 2025
kopia | v0.22.0

kopia v0.22.0 brings command-line enhancements, general improvements, new snapshot features, CI/CD updates, and fixes for Azure storage provider stability.

21 November 2025
Minimise attack surfaces on Microsoft Exchange Server

For Exchange Server security, reduce your exposed services. Remove unused roles, lock down IIS, disable legacy protocols and isolate admin accounts. Use dedicated admin workstations, enforce MFA, keep...

21 November 2025
Implementing regional redundancy after the AWS outage

Implementing regional redundancy after the AWS outage The recent AWS outage showed what happens when a DNS automation bug gets the wrong chance to run. I read that as a reminder to treat resilience...

20 November 2025
Windows 11 24H2: keeping Insider builds usable

Configure Windows 11 Insider Previews for steady test results and fast recovery. Back up your data, choose an appropriate Insider channel, limit background apps, and monitor performance. Follow clear...

20 November 2025
Deploying secure AI services on Apple Private Cloud Compute

Secure AI on Apple Private Cloud Compute Private Cloud Compute only works if the controls are boring and tight. Keep the model nodes off the public internet, put a gateway in front of them, and treat...

19 November 2025
Use Microsoft Privacy Dashboard for data oversight

Use the Microsoft Privacy Dashboard to control account data. Adjust Windows 11 privacy settings, clear activity, and limit personalised ads. Verify changes in Settings. Sign out of Copilot or unlink...

19 November 2025
Managing AI workload costs on a budget

Managing AI workload costs on a budget I run experiments and keep hardware bills tight. The useful bit is simple: measure what the workload is doing, then cut spend where it actually sits. Financial...

18 November 2025
Enhancing AI introspection in homelab setups

I run AI systems at home. I treat model introspection like a debugger, not magic. If a model claims to inspect its own steps, it still needs monitoring, logs and tests. The notes below show what to...

18 November 2025
Addressing AI browser vulnerabilities for safer use

AI web browsers security is an urgent concern for your data. This article explains risks such as prompt injection, data exposure and agent autonomy. You get concrete examples and immediate steps to...