Notes from the field

Practical perspectives on cyber security, open source, home labs, and infrastructure — written from real-world experience.

Security News — 17 Aug 2026

Today's cyber security briefing — 8 headlines from 4 sources. ISC Stormcast For Monday, August 17th, 2026 https://isc.sans.edu/podcastdetail/10054, (Mon, Aug 17th); Stolen Authority; SafePal data breach impacts 39,798 customers, stolen info for sale.

Read digest →

Security News — 16 Aug 2026

Today's cyber security briefing — 4 headlines from 2 sources. How Easy It Would Be to Hack You; Another Crazy Experience with AI; There Is Only One Technology.

Read digest →

Security News — 15 Aug 2026

Today's cyber security briefing — 14 headlines from 6 sources. How Anthropic plans to watermark Claude's AI-generated text; Friday Squid Blogging: Searching for the Colossal Squid; The Different Games OpenAI and Anthropic Are Playing.

Read digest →

Security News — 14 Aug 2026

Today's cyber security briefing — 14 headlines from 6 sources. Data analyst sent to prison for stealing data, extorting employer; ISC Stormcast For Friday, August 14th, 2026 https://isc.sans.edu/podcastdetail/10052, (Fri, Aug 14th); Apple sends new ‘….

Read digest →

Security News — 13 Aug 2026

Today's cyber security briefing — 15 headlines from 5 sources. "City-Forum" data-theft attacks target Salesforce, ServiceNow portals; Android malware combo takes out loans and relays victims' credit cards; Long-running Data Theft Campaign Targeting S….

Read digest →

Security News — 12 Aug 2026

Today's cyber security briefing — 26 headlines from 13 sources. Microsoft Patch Tuesday for August 2026 — Snort rules and prominent vulnerabilities; DeadLock ransomware uses blockchain to resist infrastructure takedown; Microsoft's Patch Tuesday Delug….

Read digest →

Security News — 11 Aug 2026

Today's cyber security briefing — 19 headlines from 8 sources. Hackers breached a small Polish energy plant via private APN last year; The Permanent Threat: Analyzing Aeternum’s Blockchain-Based C2 Operations and Communications; 'GhostJacking' Expose….

Read digest →

Security News — 10 Aug 2026

Today's cyber security briefing — 5 headlines from 4 sources. Critical Progress LoadMaster flaw now actively exploited in attacks; Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials; OpenAI's Next AI Model Astra Shows Cy….

Read digest →

Security News — 9 Aug 2026

Today's cyber security briefing — 1 headlines from 1 sources. Work Just Became Fun for Millions of People.

Read digest →

Security News — 8 Aug 2026

Today's cyber security briefing — 5 headlines from 2 sources. Hackers breach TrueConf to trojanize client installers with backdoors; Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers; New CSS Attacks Can Break Webmail….

Read digest →

Security News — 7 Aug 2026

Today's cyber security briefing — 18 headlines from 9 sources. Living off the coding agent: Two tales of tunnels and LaunchAgents; Inside the Modern SOC: The Identity Front Door; Friday Squid Blogging: Arctic Bobtail Squid Video.

Read digest →

Security News — 6 Aug 2026

Today's cyber security briefing — 21 headlines from 11 sources. ChainDrop: Inside a Self-Propagating npm Worm; CSS:the bomb inside your inbox; The Coordination Gap: How Attackers Are Outpacing Law Enforcement.

Read digest →

Security News — 5 Aug 2026

Today's cyber security briefing — 17 headlines from 8 sources. AI Sends Global Crime Syndicates Into Fraud Nirvana; AI Browsers Vulnerable to 'PleaseFix' Zero-Click Agent Hijacking; CRLF-Powered Desync Attacks: Beheading HTTP Streams.

Read digest →

Security News — 4 Aug 2026

Today's cyber security briefing — 18 headlines from 10 sources. Benchmarking the Agentic SOC: How we evaluate LLMs for security workflows; ChainDrop supply chain compromise: Anatomy of a self-propagating worm; Iran Cyberattacks Against Minnesota Water….

Read digest →

Security News — 3 Aug 2026

Today's cyber security briefing — 12 headlines from 8 sources. Attackers Exploit N-able Patch Bypass Flaw on RMM Servers; New Tool Traces AI Videos Back to Their Source; Anthropic: Claude Attacks Result of Security Gaps, Not Model Issues.

Read digest →

Cloudflare DNS backup

DNS records are part of your business continuity stack. An automated Bash script that retrieves all Cloudflare zones, converts records to BIND format, creates timestamped backups, and runs daily via cron — keeping your DNS configuration versioned and recoverable.

Read post →
Splunk Boss of the SOC ANZ 2020 dashboard screenshot

Prepping for Boss of the SOC ANZ 2020

Getting ready for Splunk's Boss of the SOC ANZ 2020 — a blue-team capture-the-flag event that puts SIEM skills to the test in a realistic threat scenario.

Read post →
Ubiquiti Network Controller installation on open source firewall hardware

Install Ubiquiti Network Controller on Open Source Firewall Hardware

A walkthrough of running the Ubiquiti Network Controller on open source firewall hardware — combining the best of both worlds for a powerful home lab network setup.

Read post →
pfSense firewall with OSINT threat feeds

Open Source Intelligence with Open Source Firewall

Those who know me well know I'm passionate about open source. How do you combine OSINT threat intelligence with an open source firewall running IDS/IPS? Building pfSense with live threat feeds to protect the family network.

Read post →