Fake Title IX emails push an abused Zoho Assist RAT at university staff through a Google Drive lure.
Standing up a first SOC from nothing and what the green field taught me.
A root zero-day in a mail appliance, exploited in the wild, and the log trust problem underneath it.
September 2026 brought a record 974 fixes and two exploited zero-days. With deployment automated, my patch day is research and handoff.
BigBear 2.0 beat MFA at 258 organizations by stealing finished sessions. The technique and the fix.
A Telegram-distributed phishing kit is bypassing MFA on Microsoft 365 with the OAuth device code flow. Here is how I detect and block it.
How llama-swap and llama.cpp power my homelab automation behind one private OpenAI-compatible endpoint.
How I run this security blog with a local AI co-pilot, and why disclosure beats co-authorship.
The advanced security architecture, operations, and governance layers that define enterprise resilience.
The reconnaissance, exploitation, and reporting layers of professional penetration testing.