This is a section for all my blogs.
DreamHost Security Incident
Overview DreamHost has forced password resets for affected email and FTP/SFTP accounts following a security incident that disrupted access to webmail and File Manager. The […]
BLOGS
PHP2Shell Now Actively Exploited
Overview The PHP2Shell vulnerabilities have crossed an important security threshold. CISA has now added CVE-2026-109618 and CVE-2026-109619 to its Known Exploited Vulnerabilities catalogue after evidence […]
Microsoft .NET Out-of-Band Updates
Overview Microsoft has released out-of-band security updates for .NET after identifying vulnerabilities that were not fully addressed by the October 13 security release. The updates […]
Kali Linux 2026.3
Overview Kali Linux 2026.3 has arrived with six new security tools, a major kernel update, desktop improvements and a refreshed approach to building Kali images. […]
When MFA Is Passed but the Session Is Stolen
Overview Multi-factor authentication has become one of the most important controls protecting Microsoft 365 identities. But MFA does not automatically protect the session that exists […]
When a Markdown File Becomes the Attack Path
Overview AI coding agents are designed to read their surroundings, understand project instructions and take actions on behalf of developers. That makes them productive — […]
Claude Mythos 5
Overview AI agents are increasingly capable of writing code, interacting with systems and pursuing multi-step objectives with limited human intervention. That capability creates a new […]
When Secure Boot Is Patched but Not Revoked
Overview Secure Boot is designed to establish trust before Windows even begins to load. But that trust depends on more than simply installing the latest […]
Microsoft Teams AI Phishing Detection
Overview Phishing attacks are becoming increasingly difficult to detect because attackers no longer need to rely on obviously malicious links, suspicious attachments or poorly written […]