agents (3)
Treating Your Agents as Insiders: Lessons from the GDM AI Control Roadmap
June 23, 2026
A summary of Google DeepMind's AI Control Roadmap, which treats capable AI agents as potential insider threats, followed by eight practical lessons for teams...
Where Was I? Breadcrumb: Finding and Resuming OpenCode Sessions Across Machines
September 21, 2026
Introduces Breadcrumb, a small daemon-free tool that records where each opencode session lives, the git state of its workspace and a gist of the last prompt,...
Your Dependencies Shipped Features Too
October 9, 2026
Dependency review is rightly built around security patches. Every upstream release also ships capabilities we could adopt. A Go 1.22 routing example shows ho...
ai (7)
Automated Cyber Range Deployments with Ludus and Claude, Part 1: Building a Range You Can Watch
September 30, 2026
Part 1 of a running log of building a cyber range by describing it to Claude Code connected to Ludus. Covers installing Ludus, deploying a segmented six-VM r...
Automated Cyber Range Deployments with Ludus and Claude, Part 2: Watching It, and Getting It Right
September 30, 2026
Part 2 adds a Wazuh SIEM on its own SOC VLAN, then reviews the whole build carefully, including a version pin meant to keep the agents in step with their man...
Can a Local Coding Model Do Threat Intel? Benchmarking Qwen3-Coder-Next on AthenaBench
July 9, 2026
Benchmarks an 8-bit Qwen3-Coder-Next running fully offline on AthenaBench's six threat-intel tasks. It scores 49.0 combined, the strongest open-weights resul...
MAVLink Has No Idea Who You Are: Drone Autonomy on an Unauthenticated Link (Part 1)
September 5, 2026
Part 1 of a series on drone link security. Builds a simulated ArduPilot lab and the MAVIO workbench to measure what an unauthenticated MAVLink link exposes, ...
Treating Your Agents as Insiders: Lessons from the GDM AI Control Roadmap
June 23, 2026
A summary of Google DeepMind's AI Control Roadmap, which treats capable AI agents as potential insider threats, followed by eight practical lessons for teams...
Where Was I? Breadcrumb: Finding and Resuming OpenCode Sessions Across Machines
September 21, 2026
Introduces Breadcrumb, a small daemon-free tool that records where each opencode session lives, the git state of its workspace and a gist of the last prompt,...
Your Dependencies Shipped Features Too
October 9, 2026
Dependency review is rightly built around security patches. Every upstream release also ships capabilities we could adopt. A Go 1.22 routing example shows ho...
ai safety (1)
Treating Your Agents as Insiders: Lessons from the GDM AI Control Roadmap
June 23, 2026
A summary of Google DeepMind's AI Control Roadmap, which treats capable AI agents as potential insider threats, followed by eight practical lessons for teams...
ansible (2)
Automated Cyber Range Deployments with Ludus and Claude, Part 1: Building a Range You Can Watch
September 30, 2026
Part 1 of a running log of building a cyber range by describing it to Claude Code connected to Ludus. Covers installing Ludus, deploying a segmented six-VM r...
Automated Cyber Range Deployments with Ludus and Claude, Part 2: Watching It, and Getting It Right
September 30, 2026
Part 2 adds a Wazuh SIEM on its own SOC VLAN, then reviews the whole build carefully, including a version pin meant to keep the agents in step with their man...
ardupilot (1)
MAVLink Has No Idea Who You Are: Drone Autonomy on an Unauthenticated Link (Part 1)
September 5, 2026
Part 1 of a series on drone link security. Builds a simulated ArduPilot lab and the MAVIO workbench to measure what an unauthenticated MAVLink link exposes, ...
benchmarking (1)
Can a Local Coding Model Do Threat Intel? Benchmarking Qwen3-Coder-Next on AthenaBench
July 9, 2026
Benchmarks an 8-bit Qwen3-Coder-Next running fully offline on AthenaBench's six threat-intel tasks. It scores 49.0 combined, the strongest open-weights resul...
bios (1)
Understanding BIOS Types - Legacy BIOS, EFI, and UEFI
January 12, 2026
A tour of PC firmware from Legacy BIOS through EFI to UEFI: how each one boots the machine, where each falls short, and why the differences matter for securi...
cicd (1)
Cloud Build Where am I??
August 13, 2022
A drop-in Cloud Build step that prints the builder's directory layout to the build log, so you can see where your Dockerfile and sources sit during a run.
claude (2)
Automated Cyber Range Deployments with Ludus and Claude, Part 1: Building a Range You Can Watch
September 30, 2026
Part 1 of a running log of building a cyber range by describing it to Claude Code connected to Ludus. Covers installing Ludus, deploying a segmented six-VM r...
Automated Cyber Range Deployments with Ludus and Claude, Part 2: Watching It, and Getting It Right
September 30, 2026
Part 2 adds a Wazuh SIEM on its own SOC VLAN, then reviews the whole build carefully, including a version pin meant to keep the agents in step with their man...
cloudbuild (1)
Cloud Build Where am I??
August 13, 2022
A drop-in Cloud Build step that prints the builder's directory layout to the build log, so you can see where your Dockerfile and sources sit during a run.
cve (1)
PHP2Shell End to End: From a Malformed POST to the Crown Jewels
October 25, 2026
A step-by-step walkthrough of Exploit-DB 52704, the PHP2Shell PoC for CVE-2026-109618, run on a Ludus range modelling a small company. Covers the vulnerabili...
cyber (11)
Anatomy of a Backdoor: The XZ Utils Supply-Chain Attack (CVE-2024-3094)
June 13, 2026
The story of CVE-2024-3094: how an attacker spent two years earning maintainer trust in XZ Utils, hid a backdoor in its build scripts and test files that hij...
Automated Cyber Range Deployments with Ludus and Claude, Part 1: Building a Range You Can Watch
September 30, 2026
Part 1 of a running log of building a cyber range by describing it to Claude Code connected to Ludus. Covers installing Ludus, deploying a segmented six-VM r...
Automated Cyber Range Deployments with Ludus and Claude, Part 2: Watching It, and Getting It Right
September 30, 2026
Part 2 adds a Wazuh SIEM on its own SOC VLAN, then reviews the whole build carefully, including a version pin meant to keep the agents in step with their man...
Can a Local Coding Model Do Threat Intel? Benchmarking Qwen3-Coder-Next on AthenaBench
July 9, 2026
Benchmarks an 8-bit Qwen3-Coder-Next running fully offline on AthenaBench's six threat-intel tasks. It scores 49.0 combined, the strongest open-weights resul...
MAVLink Has No Idea Who You Are: Drone Autonomy on an Unauthenticated Link (Part 1)
September 5, 2026
Part 1 of a series on drone link security. Builds a simulated ArduPilot lab and the MAVIO workbench to measure what an unauthenticated MAVLink link exposes, ...
PHP2Shell End to End: From a Malformed POST to the Crown Jewels
October 25, 2026
A step-by-step walkthrough of Exploit-DB 52704, the PHP2Shell PoC for CVE-2026-109618, run on a Ludus range modelling a small company. Covers the vulnerabili...
The Importance of Secure Boot
December 24, 2024
What UEFI Secure Boot checks at startup, how to add your own applications, OS files and kernel modules without turning it off, and how to detect whether it i...
Treating Your Agents as Insiders: Lessons from the GDM AI Control Roadmap
June 23, 2026
A summary of Google DeepMind's AI Control Roadmap, which treats capable AI agents as potential insider threats, followed by eight practical lessons for teams...
Understanding BIOS Types - Legacy BIOS, EFI, and UEFI
January 12, 2026
A tour of PC firmware from Legacy BIOS through EFI to UEFI: how each one boots the machine, where each falls short, and why the differences matter for securi...
Walkthrough: VulnHub 42Challenge, LFI to Root
June 11, 2026
A boot-to-root walkthrough of VulnHub's 42Challenge that chains a client-side filter bypass, local file inclusion, log poisoning, a stray shadow backup and a...
iSCSI Applications & Security
February 8, 2025
How iSCSI delivers block storage over ordinary Ethernet, how to attach LUNs to ESXi as datastores, and the controls it needs to run safely: CHAP authenticati...
cyber range (2)
Automated Cyber Range Deployments with Ludus and Claude, Part 1: Building a Range You Can Watch
September 30, 2026
Part 1 of a running log of building a cyber range by describing it to Claude Code connected to Ludus. Covers installing Ludus, deploying a segmented six-VM r...
Automated Cyber Range Deployments with Ludus and Claude, Part 2: Watching It, and Getting It Right
September 30, 2026
Part 2 adds a Wazuh SIEM on its own SOC VLAN, then reviews the whole build carefully, including a version pin meant to keep the agents in step with their man...
dependencies (1)
Your Dependencies Shipped Features Too
October 9, 2026
Dependency review is rightly built around security patches. Every upstream release also ships capabilities we could adopt. A Go 1.22 routing example shows ho...
detection engineering (3)
Automated Cyber Range Deployments with Ludus and Claude, Part 1: Building a Range You Can Watch
September 30, 2026
Part 1 of a running log of building a cyber range by describing it to Claude Code connected to Ludus. Covers installing Ludus, deploying a segmented six-VM r...
Automated Cyber Range Deployments with Ludus and Claude, Part 2: Watching It, and Getting It Right
September 30, 2026
Part 2 adds a Wazuh SIEM on its own SOC VLAN, then reviews the whole build carefully, including a version pin meant to keep the agents in step with their man...
PHP2Shell End to End: From a Malformed POST to the Crown Jewels
October 25, 2026
A step-by-step walkthrough of Exploit-DB 52704, the PHP2Shell PoC for CVE-2026-109618, run on a Ludus range modelling a small company. Covers the vulnerabili...
developer tools (1)
Where Was I? Breadcrumb: Finding and Resuming OpenCode Sessions Across Machines
September 21, 2026
Introduces Breadcrumb, a small daemon-free tool that records where each opencode session lives, the git state of its workspace and a gist of the last prompt,...
drones (1)
MAVLink Has No Idea Who You Are: Drone Autonomy on an Unauthenticated Link (Part 1)
September 5, 2026
Part 1 of a series on drone link security. Builds a simulated ArduPilot lab and the MAVIO workbench to measure what an unauthenticated MAVLink link exposes, ...
elastic (1)
PHP2Shell End to End: From a Malformed POST to the Crown Jewels
October 25, 2026
A step-by-step walkthrough of Exploit-DB 52704, the PHP2Shell PoC for CVE-2026-109618, run on a Ludus range modelling a small company. Covers the vulnerabili...
firmware (1)
Understanding BIOS Types - Legacy BIOS, EFI, and UEFI
January 12, 2026
A tour of PC firmware from Legacy BIOS through EFI to UEFI: how each one boots the machine, where each falls short, and why the differences matter for securi...
gazebo (1)
MAVLink Has No Idea Who You Are: Drone Autonomy on an Unauthenticated Link (Part 1)
September 5, 2026
Part 1 of a series on drone link security. Builds a simulated ArduPilot lab and the MAVIO workbench to measure what an unauthenticated MAVLink link exposes, ...
go (1)
Your Dependencies Shipped Features Too
October 9, 2026
Dependency review is rightly built around security patches. Every upstream release also ships capabilities we could adopt. A Go 1.22 routing example shows ho...
insider threat (1)
Treating Your Agents as Insiders: Lessons from the GDM AI Control Roadmap
June 23, 2026
A summary of Google DeepMind's AI Control Roadmap, which treats capable AI agents as potential insider threats, followed by eight practical lessons for teams...
iscsi (1)
iSCSI Applications & Security
February 8, 2025
How iSCSI delivers block storage over ordinary Ethernet, how to attach LUNs to ESXi as datastores, and the controls it needs to run safely: CHAP authenticati...
lfi (1)
Walkthrough: VulnHub 42Challenge, LFI to Root
June 11, 2026
A boot-to-root walkthrough of VulnHub's 42Challenge that chains a client-side filter bypass, local file inclusion, log poisoning, a stray shadow backup and a...
linux (1)
Anatomy of a Backdoor: The XZ Utils Supply-Chain Attack (CVE-2024-3094)
June 13, 2026
The story of CVE-2024-3094: how an attacker spent two years earning maintainer trust in XZ Utils, hid a backdoor in its build scripts and test files that hij...
llm (1)
Can a Local Coding Model Do Threat Intel? Benchmarking Qwen3-Coder-Next on AthenaBench
July 9, 2026
Benchmarks an 8-bit Qwen3-Coder-Next running fully offline on AthenaBench's six threat-intel tasks. It scores 49.0 combined, the strongest open-weights resul...
local models (1)
Can a Local Coding Model Do Threat Intel? Benchmarking Qwen3-Coder-Next on AthenaBench
July 9, 2026
Benchmarks an 8-bit Qwen3-Coder-Next running fully offline on AthenaBench's six threat-intel tasks. It scores 49.0 combined, the strongest open-weights resul...
ludus (3)
Automated Cyber Range Deployments with Ludus and Claude, Part 1: Building a Range You Can Watch
September 30, 2026
Part 1 of a running log of building a cyber range by describing it to Claude Code connected to Ludus. Covers installing Ludus, deploying a segmented six-VM r...
Automated Cyber Range Deployments with Ludus and Claude, Part 2: Watching It, and Getting It Right
September 30, 2026
Part 2 adds a Wazuh SIEM on its own SOC VLAN, then reviews the whole build carefully, including a version pin meant to keep the agents in step with their man...
PHP2Shell End to End: From a Malformed POST to the Crown Jewels
October 25, 2026
A step-by-step walkthrough of Exploit-DB 52704, the PHP2Shell PoC for CVE-2026-109618, run on a Ludus range modelling a small company. Covers the vulnerabili...
mavlink (1)
MAVLink Has No Idea Who You Are: Drone Autonomy on an Unauthenticated Link (Part 1)
September 5, 2026
Part 1 of a series on drone link security. Builds a simulated ArduPilot lab and the MAVIO workbench to measure what an unauthenticated MAVLink link exposes, ...
networking (1)
iSCSI Applications & Security
February 8, 2025
How iSCSI delivers block storage over ordinary Ethernet, how to attach LUNs to ESXi as datastores, and the controls it needs to run safely: CHAP authenticati...
opencode (1)
Where Was I? Breadcrumb: Finding and Resuming OpenCode Sessions Across Machines
September 21, 2026
Introduces Breadcrumb, a small daemon-free tool that records where each opencode session lives, the git state of its workspace and a gist of the last prompt,...
opensource (2)
Anatomy of a Backdoor: The XZ Utils Supply-Chain Attack (CVE-2024-3094)
June 13, 2026
The story of CVE-2024-3094: how an attacker spent two years earning maintainer trust in XZ Utils, hid a backdoor in its build scripts and test files that hij...
Your Dependencies Shipped Features Too
October 9, 2026
Dependency review is rightly built around security patches. Every upstream release also ships capabilities we could adopt. A Go 1.22 routing example shows ho...
pentest (1)
Walkthrough: VulnHub 42Challenge, LFI to Root
June 11, 2026
A boot-to-root walkthrough of VulnHub's 42Challenge that chains a client-side filter bypass, local file inclusion, log poisoning, a stray shadow backup and a...
php (1)
PHP2Shell End to End: From a Malformed POST to the Crown Jewels
October 25, 2026
A step-by-step walkthrough of Exploit-DB 52704, the PHP2Shell PoC for CVE-2026-109618, run on a Ludus range modelling a small company. Covers the vulnerabili...
php2shell (1)
PHP2Shell End to End: From a Malformed POST to the Crown Jewels
October 25, 2026
A step-by-step walkthrough of Exploit-DB 52704, the PHP2Shell PoC for CVE-2026-109618, run on a Ludus range modelling a small company. Covers the vulnerabili...
proxmox (2)
Automated Cyber Range Deployments with Ludus and Claude, Part 1: Building a Range You Can Watch
September 30, 2026
Part 1 of a running log of building a cyber range by describing it to Claude Code connected to Ludus. Covers installing Ludus, deploying a segmented six-VM r...
Automated Cyber Range Deployments with Ludus and Claude, Part 2: Watching It, and Getting It Right
September 30, 2026
Part 2 adds a Wazuh SIEM on its own SOC VLAN, then reviews the whole build carefully, including a version pin meant to keep the agents in step with their man...
rce (1)
PHP2Shell End to End: From a Malformed POST to the Crown Jewels
October 25, 2026
A step-by-step walkthrough of Exploit-DB 52704, the PHP2Shell PoC for CVE-2026-109618, run on a Ludus range modelling a small company. Covers the vulnerabili...
secureboot (1)
The Importance of Secure Boot
December 24, 2024
What UEFI Secure Boot checks at startup, how to add your own applications, OS files and kernel modules without turning it off, and how to detect whether it i...
series (3)
Automated Cyber Range Deployments with Ludus and Claude, Part 1: Building a Range You Can Watch
September 30, 2026
Part 1 of a running log of building a cyber range by describing it to Claude Code connected to Ludus. Covers installing Ludus, deploying a segmented six-VM r...
Automated Cyber Range Deployments with Ludus and Claude, Part 2: Watching It, and Getting It Right
September 30, 2026
Part 2 adds a Wazuh SIEM on its own SOC VLAN, then reviews the whole build carefully, including a version pin meant to keep the agents in step with their man...
MAVLink Has No Idea Who You Are: Drone Autonomy on an Unauthenticated Link (Part 1)
September 5, 2026
Part 1 of a series on drone link security. Builds a simulated ArduPilot lab and the MAVIO workbench to measure what an unauthenticated MAVLink link exposes, ...
siem (1)
Automated Cyber Range Deployments with Ludus and Claude, Part 2: Watching It, and Getting It Right
September 30, 2026
Part 2 adds a Wazuh SIEM on its own SOC VLAN, then reviews the whole build carefully, including a version pin meant to keep the agents in step with their man...
simulation (1)
MAVLink Has No Idea Who You Are: Drone Autonomy on an Unauthenticated Link (Part 1)
September 5, 2026
Part 1 of a series on drone link security. Builds a simulated ArduPilot lab and the MAVIO workbench to measure what an unauthenticated MAVLink link exposes, ...
ssh (1)
Anatomy of a Backdoor: The XZ Utils Supply-Chain Attack (CVE-2024-3094)
June 13, 2026
The story of CVE-2024-3094: how an attacker spent two years earning maintainer trust in XZ Utils, hid a backdoor in its build scripts and test files that hij...
supply chain (2)
Anatomy of a Backdoor: The XZ Utils Supply-Chain Attack (CVE-2024-3094)
June 13, 2026
The story of CVE-2024-3094: how an attacker spent two years earning maintainer trust in XZ Utils, hid a backdoor in its build scripts and test files that hij...
Your Dependencies Shipped Features Too
October 9, 2026
Dependency review is rightly built around security patches. Every upstream release also ships capabilities we could adopt. A Go 1.22 routing example shows ho...
suricata (1)
PHP2Shell End to End: From a Malformed POST to the Crown Jewels
October 25, 2026
A step-by-step walkthrough of Exploit-DB 52704, the PHP2Shell PoC for CVE-2026-109618, run on a Ludus range modelling a small company. Covers the vulnerabili...
teleseer (1)
PHP2Shell End to End: From a Malformed POST to the Crown Jewels
October 25, 2026
A step-by-step walkthrough of Exploit-DB 52704, the PHP2Shell PoC for CVE-2026-109618, run on a Ludus range modelling a small company. Covers the vulnerabili...
threat intel (1)
Can a Local Coding Model Do Threat Intel? Benchmarking Qwen3-Coder-Next on AthenaBench
July 9, 2026
Benchmarks an 8-bit Qwen3-Coder-Next running fully offline on AthenaBench's six threat-intel tasks. It scores 49.0 combined, the strongest open-weights resul...
tutorial (1)
Walkthrough: VulnHub 42Challenge, LFI to Root
June 11, 2026
A boot-to-root walkthrough of VulnHub's 42Challenge that chains a client-side filter bypass, local file inclusion, log poisoning, a stray shadow backup and a...
typescript (1)
Where Was I? Breadcrumb: Finding and Resuming OpenCode Sessions Across Machines
September 21, 2026
Introduces Breadcrumb, a small daemon-free tool that records where each opencode session lives, the git state of its workspace and a gist of the last prompt,...
uefi (1)
Understanding BIOS Types - Legacy BIOS, EFI, and UEFI
January 12, 2026
A tour of PC firmware from Legacy BIOS through EFI to UEFI: how each one boots the machine, where each falls short, and why the differences matter for securi...
vulnhub (1)
Walkthrough: VulnHub 42Challenge, LFI to Root
June 11, 2026
A boot-to-root walkthrough of VulnHub's 42Challenge that chains a client-side filter bypass, local file inclusion, log poisoning, a stray shadow backup and a...
walkthrough (1)
PHP2Shell End to End: From a Malformed POST to the Crown Jewels
October 25, 2026
A step-by-step walkthrough of Exploit-DB 52704, the PHP2Shell PoC for CVE-2026-109618, run on a Ludus range modelling a small company. Covers the vulnerabili...
wazuh (2)
Automated Cyber Range Deployments with Ludus and Claude, Part 2: Watching It, and Getting It Right
September 30, 2026
Part 2 adds a Wazuh SIEM on its own SOC VLAN, then reviews the whole build carefully, including a version pin meant to keep the agents in step with their man...
PHP2Shell End to End: From a Malformed POST to the Crown Jewels
October 25, 2026
A step-by-step walkthrough of Exploit-DB 52704, the PHP2Shell PoC for CVE-2026-109618, run on a Ludus range modelling a small company. Covers the vulnerabili...
zeek (1)
PHP2Shell End to End: From a Malformed POST to the Crown Jewels
October 25, 2026
A step-by-step walkthrough of Exploit-DB 52704, the PHP2Shell PoC for CVE-2026-109618, run on a Ludus range modelling a small company. Covers the vulnerabili...