Posts
In God we trust. All others must bring data.
From WordPress to Astro And A Fedivese Test Post
rud.is/b left WordPress after 15 years. Why I moved the blog to Astro, how I converted the legacy posts, and how an ActivityPub sidecar keeps it federated.
Citrix NetScaler ADC and Gateway bulletin: CVE-2026-88771 through CVE-2026-88778
Citrix published a security bulletin on September 27, 2026. It covers eight vulnerabilities in customer-managed NetScaler ADC and NetScaler Gateway. Two of them, CVE-2026-88771 and CVE-2026-88772, are under active exploitation. Both score…
Trump's Incredibly Stupid War Sets Up Mainers For A Brutal Winter
Maine uses more heating oil per capita than any other state, which means every global distillate shock impacts Mainers more than most other states. The chart, above, captures three major spikes and some smaller…
AttackerKB Is Shutting Down: Here's an Archive Tool
Rapid7 is sunsetting AttackerKB, and the public API goes dark on August 18, 2026 . After that, the vulnerability discussions, community assessments, and Rapid7 analysis that accumulated on the platform become a dead…
On AI Agents, Criminal Activity, And Who Is Actually Responsible
I've written and said enough times that I'm tired of OpenAI and Anthropic pulling cybersecurity out as the headline AI risk. The framing is commercially convenient, and it flattens a more complex reality — these models can break plenty of…
Your Logs Contain a Plea for Assistance In a Packet Bottle and You Likely Never Noticed It
PCAP forensics of the HMEFB worm: a self-propagating scanner with a Belarusian engineer's escape plea embedded in HTTP requests.
Unjamming the Chrome Releases Blog
For the second time in a row, a post by cr0w on Mastodon regarding the Chrome release blog appearing to not render anything resulted in me firing up lynx to show a sub-second load and render, then finally doing something a bit more…
PACT: The open web doesn't need another trust oligopoly
Cloudflare announced PACT this week — privacy-preserving tokens to separate humans from bots, backed by Google, Mozilla, Microsoft, and Shopify. The cryptography is solid. The governance model doesn't exist…
Three CVEs and the May 2026 Exploit Chain Nobody's Taking Seriously
May 2026 dropped three critical Linux vulnerabilities on a near-weekly cadence, and the security discourse has mostly treated them as three separate bad days. They're not. Together they form a reliable, race-free, forensically quiet kill…
[un]prompted Spring 2026: Threat Hunting In The Matrix
At our previous employer, the global deception and detection infrastructure generates tons of events that eventually make their way into an ever-growing data lake with (as of February 2026) 22 TB of PCAPs and 32 TB of session protocol…