Things I build, break, fix, and write about

7 November 2026
Prioritising Microsoft Patch Tuesday August 2026

Microsoft Patch Tuesday August 2026 is one of those releases where the order matters more than the headline count. I would patch the exploited flaw first, then the network-facing RCEs, and only then worry about the tidier backlog.

7 November 2026
Brand abuse detection for checkout page impersonation

Checkout impersonation is often cleaner than people expect, and that is the problem. Once a phishing framework starts swapping content at runtime, the...

7 November 2026
Security Advisory – 07 Nov 2026

Daily security advisory summary for 07 Nov 2026

6 November 2026
SMS lures and exploit trends in triage

SMS lures tell you more than the brand name ever will, and the same goes for threat intelligence newsletters if you read past the noise. I care less...

Latest blog posts you might like

2 November 2026
Weekly Tech Digest | 02 Nov 2026

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.

26 October 2026
Weekly Tech Digest | 26 Oct 2026

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.

19 October 2026
Weekly Tech Digest | 19 Oct 2026

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.

12 October 2026
Weekly Tech Digest | 12 Oct 2026

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.

28 September 2026
Removed SSRF beta detections in Cloudflare WAF

Cloudflare WAF Managed Rules have a habit of changing underneath you, and old SSRF names can linger long after the protection has gone. I prefer to check the live block logs, then test the ugly...

28 September 2026
Weekly Tech Digest | 28 Sep 2026

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.

27 September 2026
Cloudflare WAF metadata changes for WordPress XSS

Cloudflare WAF WordPress XSS detection now has a cleaner CVE label, but the behaviour has not changed; the rule still blocks the same traffic, just with less guesswork when I am reading logs. The...

27 September 2026
Cloudflare Turnstile needs backend siteverify checks

Cloudflare Turnstile siteverify is the bit that matters, not the widget on the page. I have seen too many setups that look protected until you replay the same token and watch the backend wave it...

26 September 2026
Cloudflare WAF scheduled release: log-only SQLi change

Cloudflare WAF scheduled release is one of those updates I trust less when it sounds tidy. Log-only first is sensible, because a fresh SQLi signature can look convincing right up until it starts...

26 September 2026
Log to Block for vBulletin exploit traffic

Cloudflare’s shift from log-only to blocking for vBulletin exploit traffic is the sort of change I prefer, boring and effective. Cloudflare WAF vBulletin RCE detection now does something useful by...