Things I build, break, fix, and write about

5 November 2026
Ransomware group fragmentation and detection priorities

Ransomware group fragmentation means the label matters less than the behaviour, and I trust activity over reputation every time. A small crew with rented services can do plenty of damage, so I watch for early signs, not familiar names, and I patch anything exposed before the attackers get bored.

5 November 2026
Security Advisory – 05 Nov 2026

Daily security advisory summary for 05 Nov 2026

4 November 2026
Linux kernel net/sched UAF constraints on CentOS 9 desktop

Linux kernel net/sched use-after-free looks messy on paper, and on CentOS 9 Desktop it is worse, because the obvious paths are blocked and the useful...

4 November 2026
AI-assisted pull requests raise review cost

AI-assisted pull requests look cheap until you try to review them properly. I’ve seen tidy code hide a lot of work, and the cost only goes up when a...

Latest blog posts you might like

21 February 2026
Mitigating security risks from AI recommendation poisoning

Reduce risk from AI recommendation poisoning with practical controls you can apply to your assistant today. Log incoming AI links, block anonymous memory writes, record provenance for every memory...

21 February 2026
Security Advisory – 21 Feb 2026

Daily security advisory summary for 21 Feb 2026, selected for UK homelab and sysadmin readers.

20 February 2026
Understanding Siri’s integration issues with home automation

What you see Delays show up quickly once you start using Siri for home automation. The command sits there, the acknowledgement comes late, or the action lands well after you expected it. Sometimes...

20 February 2026
Removing compromised Outlook add-ins to protect your account

Securing Your Outlook Add-ins: Lessons from the AgreeTo Hijack A popular Outlook add-in called AgreeTo was abandoned by its developer and stayed listed in the Microsoft Marketplace. An attacker took...

19 February 2026
Configuring Screenless Devices for Schools

Unlock the potential of screenless devices in education by minimising distractions and enhancing productivity. Discover effective setup and management strategies in this comprehensive guide.

19 February 2026
Firewall rules for model extraction attempts

Firewall rules for model extraction attempts AI models exposed over APIs get probed. A lot. Sometimes that is just noisy curiosity. Sometimes it is patterned traffic meant to map out model behaviour...

18 February 2026
Integrating AI software configurations in your homelab

Plan and version your homelab so AI software configurations remain reproducible, secure and easy to roll back. You should automate provisioning and testing, segment workloads on separate VLANs and...

18 February 2026
Assessing collision risks for AWS Outpost deployments

You should check telemetry for attitude alerts, sudden shutdowns, thermal spikes and short comms blackouts to identify collision risks for AWS Outpost deployments. Record exact timestamps, correlate...

17 February 2026
Training users to avoid LNK file threats

Mitigate Windows LNK file risks effectively by implementing key security measures and user training. Protect your system from shortcut vulnerabilities today.

17 February 2026
Security Advisory – 17 Feb 2026

Daily security advisory summary for 17 Feb 2026, selected for UK homelab and sysadmin readers.