Things I build, break, fix, and write about

6 November 2026
Security Advisory – 06 Nov 2026

Daily security advisory summary for 06 Nov 2026

5 November 2026
Embedded payloads in trojanised PDF viewers

Modified PDF viewers are a neat little delivery trick because they look like ordinary job bait until someone opens them. I keep coming back to the...

5 November 2026
Ransomware group fragmentation and detection priorities

Ransomware group fragmentation means the label matters less than the behaviour, and I trust activity over reputation every time. A small crew with...

5 November 2026
Security Advisory – 05 Nov 2026

Daily security advisory summary for 05 Nov 2026

Latest blog posts you might like

22 September 2026
Route UDP on Gateway API v1.6 with UDPRoute

Gateway API v1.6 stops UDP feeling like an awkward add-on, but only if the listener, parentRefs, and backendRefs all agree. I like that TCPRoute and UDPRoute are finally stable, though the controller...

21 September 2026
KYAML and YAML type coercion in Kubernetes

Kubernetes has a habit of accepting YAML that looks right and means something else entirely. KYAML is the stricter answer I wish I had earlier, with quoted strings and explicit flow style doing the...

21 September 2026
Gmail access through stolen Google Workspace OAuth tokens

A stolen Google Workspace OAuth tokens grant can outlive a password reset and keep reading mail quietly, which is the bit I dislike most. If it reaches Drive or a connected app, the damage is rarely...

21 September 2026
Weekly Tech Digest | 21 Sep 2026

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.

20 September 2026
macOS remote access abuse via VNC credential bypass

macOS Screen Sharing looks harmless until TCP 5900 is left open, then the macOS Screen Sharing authentication bypass turns a convenience into an entry point. I would not keep that service facing the...

20 September 2026
Fraud detection gaps in payment processing hand-offs

A bad update in a payment path is not just a glitch, it can be a route into customer accounts, and I have seen how quickly that gets ugly. The awkward bit with service provider transaction fraud is...

19 September 2026
AI text watermarking: where detection fails

AI text watermarking sounds neat until you hit short replies, exact wording, and code, where the signal thins out fast. I have seen enough systems fail at the edges to know the awkward bit is usually...

19 September 2026
SOCKS5 relay abuse on routers and attribution gaps

Exposed routers make tidy little relay nodes, which is why SOCKS5 relay abuse keeps turning up in places that should have been boring. The hard bit is not spotting the box, it is untangling the...

18 September 2026
Boundary design for water sector OT networks

Boundary design in water sector OT is where secure connectivity principles stop sounding neat and start mattering. I care less about tidy diagrams than about the point where a path can actually hurt...

18 September 2026
Availability trade-offs in private 5G RAN design

Private 5G deployments look neat until one site, one link or one timing source takes the strain. I care less about the brochure and more about what happens when backhaul fades, certificates expire, or...