Career Development
Entry Level Cybersecurity Jobs in 2027: The Honest ReadUS cybersecurity job postings fell 26.4% this year, according to CyberSN. And only 9.5% of the 235,786 postings were …
If you enjoy the content, then consider buying me a coffee.
OS Weekly
OS Weekly: A $133M Bank Heist, Zero-Click Phones & Leaky AI SettingsThis week’s theme is the trusted path: a service provider with access to a bank, the websites your phone visits, …
Security Engineering
Zero Trust on a $0 Budget, Part 1: Setting Up Cloudflare One's Free PlanUntil this week, I had no remote access setup at all. No VPN, no port forwards, no filtering. My Mac was protected by …
OS Weekly
OS Weekly: Node2Shell, Stolen AI Keys & Poisoned Dev ToolsThis week’s theme is the stuff developers trust by default: a compression library, a hosting platform holding your …
AI and Security
The Harness Is the Product: What Cloudflare's Vulnerability Harness Teaches AppSec TeamsMost of the conversation about AI and vulnerability research is about models. Which one found the most bugs, which one …
OS Weekly
OS Weekly: PHP2Shell, a Secure Boot Bypass & the Help Desk ProblemTwo themes ran through this week. First, speed: PHP shipped emergency fixes for two critical flaws, and within days …
AI and Security
When the Agent Is the Incident: NIST, NSA, and CISA's 10 Key Practices for SI Incident ResponseEvery incident response playbook you’ve ever written assumes the same cast. There’s an attacker, …
Vulnerability Management
PHP2Shell: What We Know About CVE-2026-109618 and CVE-2026-109619, and What to Do TodayOn October 20, two critical vulnerabilities in PHP core leaked a day before their planned disclosure. They’re …
Security Operations
The SOC Gets a New Org Chart: Five Security Operations Predictions for 2027Last week I argued that the bottleneck in detection engineering moved from writing rules to investigating alerts. If you …
Security Operations
Detection as Code 101: How It's Done at DatadogIt’s Friday afternoon. Someone tunes a noisy rule directly in the SIEM console, saves it, and logs off. Monday …