This is a section for all my blogs.
Pwn2Own Day 2 Highlights
Researchers exploited 56 unique zero-days on Day 2 of Pwn2Own Ireland 2025, earning $792,750. High‑impact demos included a five‑bug chain compromising the Samsung Galaxy S25, […]
BLOGS
ToolShell Exploited After Patch — What Every Leader Should Know
Weeks after Microsoft released a July patch for a SharePoint flaw, multiple China-linked threat groups weaponized the vulnerability (ToolShell, CVE-2025-53770) against a wide range of […]
Cursor and Windsurf Expose Developers to 94+ n‑Day Chromium Vulnerabilities
Cursor and Windsurf, two popular AI‑powered IDEs forked from Visual Studio Code and distributed as Electron apps, are running outdated Chromium and V8 engine builds […]
True Intelligence Versus Superficial AI Knowledge
Human intelligence that understands, reasons, and creates is different from surface-level knowledge retrieved or polished by AI. This post contrasts the two, highlights practical consequences […]
DNS0.EU Shuts Down — What It Means for Privacy-Minded DNS Users
DNS0.EU, a French non‑profit public DNS resolver that promised no‑logs, EU‑centric infrastructure, and encrypted resolution options, has announced an immediate shutdown due to sustainability constraints. […]
AWS Outage (Oct 20, 2025): When a Cloud Provider’s Failure Becomes Everyone’s Incident
An AWS outage in US‑EAST‑1 caused widespread disruption on October 20, 2025, taking down consumer and enterprise services including Amazon.com, Prime Video, Fortnite logins, Perplexity, […]
Wits University Cyber Attack: A Wake-Up Call for South African Institutions
On 17 October 2025, the University of the Witwatersrand (Wits) confirmed a cyber attack on its Oracle E-Business system—a sophisticated breach that exploited a zero-day […]
Microsoft Patches Highest-Severity ASP.NET Core Flaw to Date
This week, Microsoft addressed a critical vulnerability in the Kestrel ASP.NET Core web server—one that’s earned the highest severity rating ever recorded for the platform. […]
Operation Zero Disco: Cisco SNMP Flaw Used to Deploy Linux Rootkits
Trend Micro has uncovered a sophisticated campaign—dubbed Operation Zero Disco—that weaponizes a recently patched SNMP vulnerability in Cisco IOS and IOS XE software (CVE-2025-20352, CVSS […]
Capita Fined £14M for Data Breach—A Case Study in Response Failure and Regulatory Risk
Capita, one of the UK’s largest outsourcing and professional services firms, has been fined £14 million by the Information Commissioner’s Office (ICO) for a 2023 […]