Posts
Everything I have written, newest first.
Citrix NetScaler ADC and Gateway bulletin: CVE-2026-88771 through CVE-2026-88778
Source: NetScaler ADC and NetScaler Gateway security bulletin Let's make sure it gets indexed in other ways! Here's some helpful info you'll find more details of in their…
Trump's Incredibly Stupid War Sets Up Mainers For A Brutal Winter
Maine DOER:…
AttackerKB Is Shutting Down: Here's an Archive Tool
Rapid7 is sunsetting AttackerKB, and the public API goes dark on August 18, 2026. After that, the vulnerability discussions, community assessments, and Rapid7 analysis that accumulated on the platform become a dead link. I wrote a small Go…
On AI Agents, Criminal Activity, And Who Is Actually Responsible
(Repost from ai.rud.is) I've written and said enough times that I'm tired of OpenAI and Anthropic pulling cybersecurity out as the headline AI risk. The framing is commercially convenient, and it flattens a more complex reality — these…
Your Logs Contain a Plea for Assistance In a Packet Bottle and You Likely Never Noticed It
PCAP forensics of the HMEFB worm: a self-propagating scanner with a Belarusian engineer's escape plea embedded in HTTP requests.
Unjamming the Chrome Releases Blog
For the second time in a row, a post by cr0w on Mastodon regarding the Chrome release blog appearing to not render anything resulted in me firing up lynx to show a sub-second load and render, then finally doing something a bit more…
PACT: The open web doesn't need another trust oligopoly
Cloudflare announced PACT this week — privacy-preserving tokens to separate humans from bots, backed by Google, Mozilla, Microsoft, and Shopify. The cryptography is solid. The governance model doesn't exist yet. I wrote about why the…
Three CVEs and the May 2026 Exploit Chain Nobody's Taking Seriously
May 2026 dropped three critical Linux vulnerabilities on a near-weekly cadence, and the security discourse has mostly treated them as three separate bad days. They're not. Together they form a reliable, race-free, forensically quiet kill…
[un]prompted Spring 2026: Threat Hunting In The Matrix
https://www.youtube.com/watch?v=k19CmI\Ni3M At our previous employer, the global deception and detection infrastructure generates tons of events that eventually make their way into an ever-growing data lake with (as of February 2026) 22 TB…
AI Proofing Your It/cyber Career: The Human Only Capabilities That Matter
In the past ~4 weeks I have personally observed some irrefutable things in "AI" that are very likely going to cause massive shocks to employment models in IT, software development, systems administration, and cybersecurity. I know some…