News
Current reporting, reactions, and incidents with actual operator value.
Intro / Live feed
Operator writing for noisy security days.
If the internet insists on turning every bug, breach, and dashboard into a dramatic monologue, this site is here to be less theatrical and more useful.
News is for the stories that matter now. Articles are for ideas worth keeping. Tracks are for learning the machinery in the right order, instead of collecting half-understood fragments like rare trading cards for people with terminal tabs.
- 71
- Posts published
- 3
- Reading lanes
- Jun 28
- Latest dispatch
Read By Lane
Articles
Longer essays, technical judgment, and pieces meant to age decently.
Tracks
Stepwise lessons in networking, virtualization, systems, and security craft.
01 News
What is worth slowing down for right now.
Current reporting and incidents, read for operator value instead of headline drama.
Lead News
Cisco Unified CM turns an unused feature into a root-shell emergency
CVE-2026-20230 shows how one optional, disabled-by-default feature in Cisco Unified Communications Manager became an unauthenticated path to root, and why CISA gave defenders only three days to close it.
Read the dispatchNews
Cisco SD-WAN KEV update is a control-plane warning
CISA's April 20, 2026 KEV update matters because it pulls another Cisco Catalyst SD-WAN Manager flaw into the exploited bucket, turning what might look like a narrow information disclosure bug into a control-plane hunting...
News
SGLang RCE makes model files part of the attack surface
CVE-2026-5760 matters because it turns an AI model artifact into a server-side code execution path, which means inference teams need model provenance, template sandboxing, and runtime containment before the next charmingly named model shows...
News
SharePoint zero-days do not care that the bug says spoofing
CVE-2026-32201 matters because a medium-rated SharePoint spoofing flaw still shipped with exploitation already detected, which is a reminder that trusted internal portals can become attack infrastructure long before anyone gets around to arguing about...
News
nginx-ui turns MCP into a reverse-proxy takeover
CVE-2026-33032 matters because it did not break nginx with exotic memory corruption; it let attackers drive a production reverse proxy through an unauthenticated MCP message endpoint, which is a much more practical way to...
News
W3LL was never just a phishing kit
The April 13, 2026 takedown of W3LL matters because the real target was not one fake-login toolkit but an access market that packaged AiTM phishing, session theft, and account resale into something cheap enough...
News
SharePoint turns spoofing into an internal trust incident
Microsoft’s April 14, 2026 fix for CVE-2026-32201 matters because an exploited SharePoint 'spoofing' bug is not a cosmetic problem inside a trusted collaboration platform; it is a way to poison internal content, workflows, and...
News
Iran does not need a zero-day if your PLC is on the internet
The April 7, 2026 PLC advisory matters because the attack path was not exotic OT malware but internet-exposed controllers reachable through legitimate engineering tooling, which turns a public IP on a PLC into a...
News
APT28 turns SOHO routers into a cloud identity problem
The April 7, 2026 APT28 router disclosures matter because they show how an unmaintained edge device in a home or branch office can quietly become the upstream control point for Microsoft 365 credential theft...
02 Articles
Ideas worth keeping after the week's headlines fade.
Longer essays and technical judgment, meant to age decently.
Article
Expiration is a security property, not a cleanup chore
Expiration bounds how long a leaked credential, cached permission, or stale grant remains useful, which makes time-to-live a security control in its own right rather than a background cleanup detail.
Read articleArticle
Authority should travel as a capability, not hang in the air
Authorization gets safer when systems stop relying on ambient permission checks and instead pass explicit, narrow capabilities that describe exactly what an operation is allowed to do.
Read articleArticle
Idempotence is a security property, not just an API nicety
Idempotence matters because systems under stress retry, replay, and repeat work, and a design that produces the same safe result for the same intent is harder to break by accident, abuse, or panic.
Read articleArticle
Rollback is a security control, not just an ops courtesy
Rollback is one of the few controls that reduces the blast radius of both mistakes and attacks, because a system that can back out change cleanly is a system that can recover before small...
Read articleArticle
Every fallback is a trust decision
Fallback paths are where systems reveal what they really trust, which makes them both operationally useful and quietly dangerous.
Read articleArticle
Launching the blog
Why this site exists and how it becomes the canonical home for daily writing.
Read article03 Tracks
Knowledge lanes for building actual skill.
The long-running routes through the site, meant to compound over time.
Track
Dynamic programming is how recursion stops paying for the same answer twice
Dynamic programming takes a recursive function that keeps re-solving the same subproblems and gives it a memory, turning exponential blowup into work that grows only as fast as the number of distinct subproblems.
Read trackTrack
Algorithmic complexity is how work grows
Algorithmic complexity describes how a program's work grows as the input grows, giving us a practical way to compare approaches before production traffic turns small inefficiencies into expensive alarms.
Read trackTrack
Binary search is how order turns guessing into elimination
Binary search uses the promise of sorted data to compare against the middle item, discard half the remaining possibilities, and find answers without trudging through every value one by one.
Read trackTrack
Sorting is how programs turn comparisons into order
Sorting is the disciplined process of repeatedly comparing and moving values until scattered data becomes ordered data, which lets later algorithms search, merge, and reason with far less confusion.
Read trackTrack
Priority queues are how programs let urgency outrank arrival time
A priority queue stores pending work with an ordering rule stronger than arrival time, letting programs remove the most important item first without sorting the whole world every time they need the next decision....
Read trackTrack
Queues are how programs remember which work happens next
A queue stores pending work in first-in, first-out order, which lets programs process arrivals fairly, coordinate producers with consumers, and turn 'later' from a hand-wave into concrete state in memory.
Read track