Things I build, break, fix, and write about

5 November 2026
Embedded payloads in trojanised PDF viewers

Modified PDF viewers are a neat little delivery trick because they look like ordinary job bait until someone opens them. I keep coming back to the same point, the file name is not the danger, the loader path is; that is where the unwanted code slips in.

5 November 2026
Ransomware group fragmentation and detection priorities

Ransomware group fragmentation means the label matters less than the behaviour, and I trust activity over reputation every time. A small crew with...

5 November 2026
Security Advisory – 05 Nov 2026

Daily security advisory summary for 05 Nov 2026

4 November 2026
Linux kernel net/sched UAF constraints on CentOS 9 desktop

Linux kernel net/sched use-after-free looks messy on paper, and on CentOS 9 Desktop it is worse, because the obvious paths are blocked and the useful...

Latest blog posts you might like

4 February 2026
Mitigating privilege escalation risks in Cisco Intersight

Explore the risks of privilege escalation in Cisco Intersight following CVE-2026-20092. Learn essential steps to secure your appliance and mitigate vulnerabilities effectively.

3 February 2026
Mitigating XSS in Cisco Packaged CCE

XSS vulnerabilities in Cisco's Contact Centres pose serious risks. Understanding CVE-2026-20055 and CVE-2026-20109 is vital for prioritising effective security measures.

2 February 2026
Amazon Fire TV Stick 4K Plus and 2 more Amazon tech bargains

Discover the Amazon Fire TV Stick 4K Plus and two more tech deals this week.

2 February 2026
Understanding Cisco vulnerabilities: CVE-2026-20045

Discover essential strategies for managing the critical Cisco CVE-2026-20045 vulnerability. Learn how to secure Unified Communications systems effectively and minimise risks.

1 February 2026
Mitigation strategies for SSH denial of service attacks

Secure your homelab by mitigating SSH Denial of Service risks. Discover practical steps to enhance SSH configuration and implement effective network controls today.

1 February 2026
Using cloud services for AI work

Unlocking AI adoption for IT teams is essential for staying competitive. Discover practical strategies for leveraging cloud services, reskilling, and automating tasks effectively.

31 January 2026
Ransomware lessons from the Luxshare Precision breach

The Luxshare incident highlights urgent vulnerabilities in Supply Chain Security. Learn how ransomware threats can compromise sensitive data and what actions to take now.

31 January 2026
Automation strategies for AI in a homelab

Discover how to effectively integrate AI into your homelab by following a systematic approach, ensuring reliability while protecting existing services.

30 January 2026
AI deployment barriers in business operations

Unlock the potential of AI in your business with this essential guide. Discover common pitfalls, effective fixes, and strategies for maximising ROI from AI investments.

30 January 2026
Managing AI integration risks in ServiceNow workflows

Integrating OpenAI models into ServiceNow workflows transforms automation, enhancing capabilities while raising governance concerns. Discover strategies for effective implementation and risk...