2026

AI

• ISO 27090: A Threat Model for the Thing That Has No Threat Model
• Dear Bots, Welcome to My Blog
• The Web Is Mostly Bots Now
• When Offensive Tools Get an AI Brain

AWS

• The Cloud Has a Physical Address

C2

• The Phone Call After the Spam

CVE

• The CVE System Is Breaking and Nobody Has a Backup Plan

DCA

• DCA Is Not a Strategy. It Is a Coping Mechanism (And That Is Fine)
• Weekly DCA vs. Monthly DCA vs. Lump Sum. 20 Years of S&P 500 Data

DNS

• The DNS Sinkhole That Catches What Your EDR Misses
• Passive DNS Is the Log You Are Not Collecting

GRC

• ISO 27090: A Threat Model for the Thing That Has No Threat Model
• NIS2: The Directive Nobody Transposed on Time
• Vulnerability Scanning Is Not Vulnerability Management
• NIS2 Compliance Starts with Asset Inventory, Not Policies
• Lexis1234

ICS

• 7,500 Building Controllers and a Vendor Who Will Not Patch

ISO

• ISO 27090: A Threat Model for the Thing That Has No Threat Model

IoT

• Your Tires Are Broadcasting

NIS2

• NIS2: The Directive Nobody Transposed on Time
• NIS2 Compliance Starts with Asset Inventory, Not Policies

OAuth

• The OAuth Redirect That Phishing Filters Cannot See

OSINT

• Shodan Is Old News. Try These Instead

OT

• 7,500 Building Controllers and a Vendor Who Will Not Patch

PQC

• The Qubit Curve Only Goes One Way

RSA

• The Qubit Curve Only Goes One Way

WAF

• When Offensive Tools Get an AI Brain

android

• A Signed Int Broke 234 Chipsets

bot-management

• robots.txt Is a Security Vulnerability
• The Web Is Mostly Bots Now

bots

• Dear Bots, Welcome to My Blog
• The Web Is Mostly Bots Now

breach

• Lexis1234

building-automation

• 7,500 Building Controllers and a Vendor Who Will Not Patch

cPanel

• Your Hosting Panel Is Already For Sale

cloud

• Lexis1234
• The Cloud Has a Physical Address

compliance

• NIS2: The Directive Nobody Transposed on Time
• NIS2 Compliance Starts with Asset Inventory, Not Policies

cryptography

• The Qubit Curve Only Goes One Way

cybercrime

• Your Hosting Panel Is Already For Sale

data

• Weekly DCA vs. Monthly DCA vs. Lump Sum. 20 Years of S&P 500 Data

data-security

• Lexis1234

detection

• Sigma Rules Are the Detection Language Your SIEM Already Supports

education

• How to Read an Earnings Report in 10 Minutes

europe

• NIS2: The Directive Nobody Transposed on Time

fortigate

• When Offensive Tools Get an AI Brain

fundamentals

• How to Read an Earnings Report in 10 Minutes

hidden-gem

• The DNS Sinkhole That Catches What Your EDR Misses
• Sigma Rules Are the Detection Language Your SIEM Already Supports
• Vulnerability Scanning Is Not Vulnerability Management
• Caido Is the Burp Alternative I Actually Enjoy Using
• NIS2 Compliance Starts with Asset Inventory, Not Policies
• CrowdSec Is the Fail2Ban Replacement I Wish I Found Sooner
• robots.txt Is a Security Vulnerability
• Passive DNS Is the Log You Are Not Collecting
• The CVE System Is Breaking and Nobody Has a Backup Plan
• Nuclei Changed How I Run Recon
• Shodan Is Old News. Try These Instead
• GreyNoise Is the Threat Intel Nobody Uses

hosting

• Your Hosting Panel Is Already For Sale

infrastructure

• CrowdSec Is the Fail2Ban Replacement I Wish I Found Sooner
• The Cloud Has a Physical Address

investing

• How to Read an Earnings Report in 10 Minutes
• DCA Is Not a Strategy. It Is a Coping Mechanism (And That Is Fine)
• Weekly DCA vs. Monthly DCA vs. Lump Sum. 20 Years of S&P 500 Data

malware

• The Phone Call After the Spam

microsoft

• The OAuth Redirect That Phishing Filters Cannot See

network-security

• AirSnitch and the Myth of Wi-Fi Client Isolation

offensive-security

• When Offensive Tools Get an AI Brain

pentesting

• Caido Is the Burp Alternative I Actually Enjoy Using

philosophy

• Dear Bots, Welcome to My Blog

phishing

• Your Hosting Panel Is Already For Sale
• The OAuth Redirect That Phishing Filters Cannot See

post-quantum

• The Qubit Curve Only Goes One Way

privacy

• Your Tires Are Broadcasting

qualcomm

• A Signed Int Broke 234 Chipsets

ransomware

• The Phone Call After the Spam

regulation

• NIS2: The Directive Nobody Transposed on Time

research

• AirSnitch and the Myth of Wi-Fi Client Isolation

risk

• Stop-Loss Orders Are Costing You Money. Here Is the Data

security

• ISO 27090: A Threat Model for the Thing That Has No Threat Model
• NIS2: The Directive Nobody Transposed on Time
• The DNS Sinkhole That Catches What Your EDR Misses
• Sigma Rules Are the Detection Language Your SIEM Already Supports
• Vulnerability Scanning Is Not Vulnerability Management
• Caido Is the Burp Alternative I Actually Enjoy Using
• NIS2 Compliance Starts with Asset Inventory, Not Policies
• CrowdSec Is the Fail2Ban Replacement I Wish I Found Sooner
• robots.txt Is a Security Vulnerability
• The Web Is Mostly Bots Now
• Passive DNS Is the Log You Are Not Collecting
• Lexis1234
• The CVE System Is Breaking and Nobody Has a Backup Plan
• 7,500 Building Controllers and a Vendor Who Will Not Patch
• Nuclei Changed How I Run Recon
• Your Tires Are Broadcasting
• Shodan Is Old News. Try These Instead
• A Signed Int Broke 234 Chipsets
• GreyNoise Is the Threat Intel Nobody Uses
• The Phone Call After the Spam
• AirSnitch and the Myth of Wi-Fi Client Isolation
• Your Hosting Panel Is Already For Sale
• The OAuth Redirect That Phishing Filters Cannot See
• The Cloud Has a Physical Address
• When Offensive Tools Get an AI Brain
• The Qubit Curve Only Goes One Way

social-engineering

• The Phone Call After the Spam

spyware

• A Signed Int Broke 234 Chipsets

standards

• ISO 27090: A Threat Model for the Thing That Has No Threat Model

strategy

• Stop-Loss Orders Are Costing You Money. Here Is the Data
• DCA Is Not a Strategy. It Is a Coping Mechanism (And That Is Fine)

threat-detection

• The DNS Sinkhole That Catches What Your EDR Misses
• Passive DNS Is the Log You Are Not Collecting

threat-intelligence

• GreyNoise Is the Threat Intel Nobody Uses

tools

• Sigma Rules Are the Detection Language Your SIEM Already Supports
• Caido Is the Burp Alternative I Actually Enjoy Using
• CrowdSec Is the Fail2Ban Replacement I Wish I Found Sooner
• Nuclei Changed How I Run Recon
• Shodan Is Old News. Try These Instead
• GreyNoise Is the Threat Intel Nobody Uses

tracking

• Your Tires Are Broadcasting

trading

• Stop-Loss Orders Are Costing You Money. Here Is the Data

vehicle

• Your Tires Are Broadcasting

vulnerability

• Vulnerability Scanning Is Not Vulnerability Management
• The CVE System Is Breaking and Nobody Has a Backup Plan
• 7,500 Building Controllers and a Vendor Who Will Not Patch
• Nuclei Changed How I Run Recon
• Shodan Is Old News. Try These Instead
• A Signed Int Broke 234 Chipsets

web

• Dear Bots, Welcome to My Blog

web-security

• robots.txt Is a Security Vulnerability
• The Web Is Mostly Bots Now
• The OAuth Redirect That Phishing Filters Cannot See

wifi

• AirSnitch and the Myth of Wi-Fi Client Isolation