Things I build, break, fix, and write about

5 November 2026
Embedded payloads in trojanised PDF viewers

Modified PDF viewers are a neat little delivery trick because they look like ordinary job bait until someone opens them. I keep coming back to the same point, the file name is not the danger, the loader path is; that is where the unwanted code slips in.

5 November 2026
Ransomware group fragmentation and detection priorities

Ransomware group fragmentation means the label matters less than the behaviour, and I trust activity over reputation every time. A small crew with...

5 November 2026
Security Advisory – 05 Nov 2026

Daily security advisory summary for 05 Nov 2026

4 November 2026
Linux kernel net/sched UAF constraints on CentOS 9 desktop

Linux kernel net/sched use-after-free looks messy on paper, and on CentOS 9 Desktop it is worse, because the obvious paths are blocked and the useful...

Latest blog posts you might like

23 November 2025
Implementing on-device AI for privacy in home labs

On-Device AI keeps models and data on hardware you control, protecting privacy in your home lab. This guide shows you how to set up local inference, secure storage and network isolation, with...

23 November 2025
Weekly Tech Digest | 23 Nov 2025

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.

23 November 2025
Mitigating AI misalignment in your homelab

AI Misalignment can alter behaviour in your homelab without checks. This guide gives practical steps you can apply today. Contain models, block network access where possible, log prompts and responses...

22 November 2025
Implementing small AI pilots to show the return

Implementing small AI pilots to show the return I keep this practical. AI budgeting is not a spreadsheet trick. It is a series of small bets that either prove value quickly or get cut. Start with...

22 November 2025
Assessing Windows 11 compatibility for medical devices

Check Windows 11 compatibility before you upgrade medical devices. Record exact error messages, capture screenshots and event logs, and run TPM and Secure Boot checks. Keep vendor responses and...

22 November 2025
kopia | v0.22.0

kopia v0.22.0 brings command-line enhancements, general improvements, new snapshot features, CI/CD updates, and fixes for Azure storage provider stability.

21 November 2025
Minimise attack surfaces on Microsoft Exchange Server

For Exchange Server security, reduce your exposed services. Remove unused roles, lock down IIS, disable legacy protocols and isolate admin accounts. Use dedicated admin workstations, enforce MFA, keep...

21 November 2025
Implementing regional redundancy after the AWS outage

Implementing regional redundancy after the AWS outage The recent AWS outage showed what happens when a DNS automation bug gets the wrong chance to run. I read that as a reminder to treat resilience...

20 November 2025
Windows 11 24H2: keeping Insider builds usable

Configure Windows 11 Insider Previews for steady test results and fast recovery. Back up your data, choose an appropriate Insider channel, limit background apps, and monitor performance. Follow clear...

20 November 2025
Deploying secure AI services on Apple Private Cloud Compute

Secure AI on Apple Private Cloud Compute Private Cloud Compute only works if the controls are boring and tight. Keep the model nodes off the public internet, put a gateway in front of them, and treat...