Things I build, break, fix, and write about

7 November 2026
Prioritising Microsoft Patch Tuesday August 2026

Microsoft Patch Tuesday August 2026 is one of those releases where the order matters more than the headline count. I would patch the exploited flaw first, then the network-facing RCEs, and only then worry about the tidier backlog.

7 November 2026
Brand abuse detection for checkout page impersonation

Checkout impersonation is often cleaner than people expect, and that is the problem. Once a phishing framework starts swapping content at runtime, the...

7 November 2026
Security Advisory – 07 Nov 2026

Daily security advisory summary for 07 Nov 2026

6 November 2026
SMS lures and exploit trends in triage

SMS lures tell you more than the brand name ever will, and the same goes for threat intelligence newsletters if you read past the noise. I care less...

Latest blog posts you might like

20 September 2026
Fraud detection gaps in payment processing hand-offs

A bad update in a payment path is not just a glitch, it can be a route into customer accounts, and I have seen how quickly that gets ugly. The awkward bit with service provider transaction fraud is...

19 September 2026
AI text watermarking: where detection fails

AI text watermarking sounds neat until you hit short replies, exact wording, and code, where the signal thins out fast. I have seen enough systems fail at the edges to know the awkward bit is usually...

19 September 2026
SOCKS5 relay abuse on routers and attribution gaps

Exposed routers make tidy little relay nodes, which is why SOCKS5 relay abuse keeps turning up in places that should have been boring. The hard bit is not spotting the box, it is untangling the...

18 September 2026
Boundary design for water sector OT networks

Boundary design in water sector OT is where secure connectivity principles stop sounding neat and start mattering. I care less about tidy diagrams than about the point where a path can actually hurt...

18 September 2026
Availability trade-offs in private 5G RAN design

Private 5G deployments look neat until one site, one link or one timing source takes the strain. I care less about the brochure and more about what happens when backhaul fades, certificates expire, or...

17 September 2026
Require a BitLocker pre-boot PIN

TPM-only BitLocker is tidy until you remember what is left exposed when the machine can unlock itself. BitLocker PINs are the small, awkward step that makes a stolen laptop less cooperative, and I...

17 September 2026
Secure connectivity principles in water sector OT

Secure connectivity principles only work when the boundary is real, not decorative. I’ve seen too many remote paths that looked neat on paper and fell apart the moment someone needed to patch a PLC at...

16 September 2026
Monitoring radio, transport and core faults

Private 5G resilience does not come from a cheerful dashboard or a nice radio map. I want to see where the attach failed, which path dropped, and whether the core is quietly spoiling the whole thing;...

16 September 2026
Pre-boot authentication for BitLocker

TPM-only BitLocker is convenient, but convenience is not the same as a proper boundary. BitLocker PINs push that line back to pre-boot, which is where I want it if the machine might be stolen,...

15 September 2026
Single-sided BPool joins drain mOCEAN via SideStaking

Ocean Protocol BPool single-sided join exit math is where this one falls apart, and I have a soft spot for bugs that look tidy until another contract gets involved. SideStaking turns a neat little...