agents (3)
Treating Your Agents as Insiders: Lessons from the GDM AI Control Roadmap
June 23, 2026
A summary of Google DeepMind's AI Control Roadmap, which treats capable AI agents as potential insider threats, followed by eight practical lessons for teams...
Where Was I? Breadcrumb: Finding and Resuming OpenCode Sessions Across Machines
September 21, 2026
Introduces Breadcrumb, a small daemon-free tool that records where each opencode session lives, the git state of its workspace and a gist of the last prompt,...
Your Dependencies Shipped Features Too
October 9, 2026
Dependency review is rightly built around security patches. Every upstream release also ships capabilities we could adopt. A Go 1.22 routing example shows ho...
ai (7)
Automated Cyber Range Deployments with Ludus and Claude, Part 1: Building a Range You Can Watch
September 30, 2026
Part 1 of a running log of building a cyber range by describing it to Claude Code connected to Ludus. Covers installing Ludus, deploying a segmented six-VM r...
Automated Cyber Range Deployments with Ludus and Claude, Part 2: Watching It, and Getting It Right
September 30, 2026
Part 2 adds a Wazuh SIEM on its own SOC VLAN, then reviews the whole build carefully, including a version pin meant to keep the agents in step with their man...
Can a Local Coding Model Do Threat Intel? Benchmarking Qwen3-Coder-Next on AthenaBench
July 9, 2026
Benchmarks an 8-bit Qwen3-Coder-Next running fully offline on AthenaBench's six threat-intel tasks. It scores 49.0 combined, the strongest open-weights resul...
MAVLink Has No Idea Who You Are: Drone Autonomy on an Unauthenticated Link (Part 1)
September 5, 2026
Part 1 of a series on drone link security. Builds a simulated ArduPilot lab and the MAVIO workbench to measure what an unauthenticated MAVLink link exposes, ...
Treating Your Agents as Insiders: Lessons from the GDM AI Control Roadmap
June 23, 2026
A summary of Google DeepMind's AI Control Roadmap, which treats capable AI agents as potential insider threats, followed by eight practical lessons for teams...
Where Was I? Breadcrumb: Finding and Resuming OpenCode Sessions Across Machines
September 21, 2026
Introduces Breadcrumb, a small daemon-free tool that records where each opencode session lives, the git state of its workspace and a gist of the last prompt,...
Your Dependencies Shipped Features Too
October 9, 2026
Dependency review is rightly built around security patches. Every upstream release also ships capabilities we could adopt. A Go 1.22 routing example shows ho...
ai safety (1)
Treating Your Agents as Insiders: Lessons from the GDM AI Control Roadmap
June 23, 2026
A summary of Google DeepMind's AI Control Roadmap, which treats capable AI agents as potential insider threats, followed by eight practical lessons for teams...
ansible (2)
Automated Cyber Range Deployments with Ludus and Claude, Part 1: Building a Range You Can Watch
September 30, 2026
Part 1 of a running log of building a cyber range by describing it to Claude Code connected to Ludus. Covers installing Ludus, deploying a segmented six-VM r...
Automated Cyber Range Deployments with Ludus and Claude, Part 2: Watching It, and Getting It Right
September 30, 2026
Part 2 adds a Wazuh SIEM on its own SOC VLAN, then reviews the whole build carefully, including a version pin meant to keep the agents in step with their man...
ardupilot (1)
MAVLink Has No Idea Who You Are: Drone Autonomy on an Unauthenticated Link (Part 1)
September 5, 2026
Part 1 of a series on drone link security. Builds a simulated ArduPilot lab and the MAVIO workbench to measure what an unauthenticated MAVLink link exposes, ...
benchmarking (1)
Can a Local Coding Model Do Threat Intel? Benchmarking Qwen3-Coder-Next on AthenaBench
July 9, 2026
Benchmarks an 8-bit Qwen3-Coder-Next running fully offline on AthenaBench's six threat-intel tasks. It scores 49.0 combined, the strongest open-weights resul...
bios (1)
Understanding BIOS Types - Legacy BIOS, EFI, and UEFI
January 12, 2026
A tour of PC firmware from Legacy BIOS through EFI to UEFI: how each one boots the machine, where each falls short, and why the differences matter for securi...
cicd (1)
Cloud Build Where am I??
August 13, 2022
A drop-in Cloud Build step that prints the builder's directory layout to the build log, so you can see where your Dockerfile and sources sit during a run.
claude (2)
Automated Cyber Range Deployments with Ludus and Claude, Part 1: Building a Range You Can Watch
September 30, 2026
Part 1 of a running log of building a cyber range by describing it to Claude Code connected to Ludus. Covers installing Ludus, deploying a segmented six-VM r...
Automated Cyber Range Deployments with Ludus and Claude, Part 2: Watching It, and Getting It Right
September 30, 2026
Part 2 adds a Wazuh SIEM on its own SOC VLAN, then reviews the whole build carefully, including a version pin meant to keep the agents in step with their man...
cloudbuild (1)
Cloud Build Where am I??
August 13, 2022
A drop-in Cloud Build step that prints the builder's directory layout to the build log, so you can see where your Dockerfile and sources sit during a run.
cyber (10)
Anatomy of a Backdoor: The XZ Utils Supply-Chain Attack (CVE-2024-3094)
June 13, 2026
The story of CVE-2024-3094: how an attacker spent two years earning maintainer trust in XZ Utils, hid a backdoor in its build scripts and test files that hij...
Automated Cyber Range Deployments with Ludus and Claude, Part 1: Building a Range You Can Watch
September 30, 2026
Part 1 of a running log of building a cyber range by describing it to Claude Code connected to Ludus. Covers installing Ludus, deploying a segmented six-VM r...
Automated Cyber Range Deployments with Ludus and Claude, Part 2: Watching It, and Getting It Right
September 30, 2026
Part 2 adds a Wazuh SIEM on its own SOC VLAN, then reviews the whole build carefully, including a version pin meant to keep the agents in step with their man...
Can a Local Coding Model Do Threat Intel? Benchmarking Qwen3-Coder-Next on AthenaBench
July 9, 2026
Benchmarks an 8-bit Qwen3-Coder-Next running fully offline on AthenaBench's six threat-intel tasks. It scores 49.0 combined, the strongest open-weights resul...
MAVLink Has No Idea Who You Are: Drone Autonomy on an Unauthenticated Link (Part 1)
September 5, 2026
Part 1 of a series on drone link security. Builds a simulated ArduPilot lab and the MAVIO workbench to measure what an unauthenticated MAVLink link exposes, ...
The Importance of Secure Boot
December 24, 2024
What UEFI Secure Boot checks at startup, how to add your own applications, OS files and kernel modules without turning it off, and how to detect whether it i...
Treating Your Agents as Insiders: Lessons from the GDM AI Control Roadmap
June 23, 2026
A summary of Google DeepMind's AI Control Roadmap, which treats capable AI agents as potential insider threats, followed by eight practical lessons for teams...
Understanding BIOS Types - Legacy BIOS, EFI, and UEFI
January 12, 2026
A tour of PC firmware from Legacy BIOS through EFI to UEFI: how each one boots the machine, where each falls short, and why the differences matter for securi...
Walkthrough: VulnHub 42Challenge, LFI to Root
June 11, 2026
A boot-to-root walkthrough of VulnHub's 42Challenge that chains a client-side filter bypass, local file inclusion, log poisoning, a stray shadow backup and a...
iSCSI Applications & Security
February 8, 2025
How iSCSI delivers block storage over ordinary Ethernet, how to attach LUNs to ESXi as datastores, and the controls it needs to run safely: CHAP authenticati...
cyber range (2)
Automated Cyber Range Deployments with Ludus and Claude, Part 1: Building a Range You Can Watch
September 30, 2026
Part 1 of a running log of building a cyber range by describing it to Claude Code connected to Ludus. Covers installing Ludus, deploying a segmented six-VM r...
Automated Cyber Range Deployments with Ludus and Claude, Part 2: Watching It, and Getting It Right
September 30, 2026
Part 2 adds a Wazuh SIEM on its own SOC VLAN, then reviews the whole build carefully, including a version pin meant to keep the agents in step with their man...
dependencies (1)
Your Dependencies Shipped Features Too
October 9, 2026
Dependency review is rightly built around security patches. Every upstream release also ships capabilities we could adopt. A Go 1.22 routing example shows ho...
detection engineering (2)
Automated Cyber Range Deployments with Ludus and Claude, Part 1: Building a Range You Can Watch
September 30, 2026
Part 1 of a running log of building a cyber range by describing it to Claude Code connected to Ludus. Covers installing Ludus, deploying a segmented six-VM r...
Automated Cyber Range Deployments with Ludus and Claude, Part 2: Watching It, and Getting It Right
September 30, 2026
Part 2 adds a Wazuh SIEM on its own SOC VLAN, then reviews the whole build carefully, including a version pin meant to keep the agents in step with their man...
developer tools (1)
Where Was I? Breadcrumb: Finding and Resuming OpenCode Sessions Across Machines
September 21, 2026
Introduces Breadcrumb, a small daemon-free tool that records where each opencode session lives, the git state of its workspace and a gist of the last prompt,...
drones (1)
MAVLink Has No Idea Who You Are: Drone Autonomy on an Unauthenticated Link (Part 1)
September 5, 2026
Part 1 of a series on drone link security. Builds a simulated ArduPilot lab and the MAVIO workbench to measure what an unauthenticated MAVLink link exposes, ...
firmware (1)
Understanding BIOS Types - Legacy BIOS, EFI, and UEFI
January 12, 2026
A tour of PC firmware from Legacy BIOS through EFI to UEFI: how each one boots the machine, where each falls short, and why the differences matter for securi...
gazebo (1)
MAVLink Has No Idea Who You Are: Drone Autonomy on an Unauthenticated Link (Part 1)
September 5, 2026
Part 1 of a series on drone link security. Builds a simulated ArduPilot lab and the MAVIO workbench to measure what an unauthenticated MAVLink link exposes, ...
go (1)
Your Dependencies Shipped Features Too
October 9, 2026
Dependency review is rightly built around security patches. Every upstream release also ships capabilities we could adopt. A Go 1.22 routing example shows ho...
insider threat (1)
Treating Your Agents as Insiders: Lessons from the GDM AI Control Roadmap
June 23, 2026
A summary of Google DeepMind's AI Control Roadmap, which treats capable AI agents as potential insider threats, followed by eight practical lessons for teams...
iscsi (1)
iSCSI Applications & Security
February 8, 2025
How iSCSI delivers block storage over ordinary Ethernet, how to attach LUNs to ESXi as datastores, and the controls it needs to run safely: CHAP authenticati...
lfi (1)
Walkthrough: VulnHub 42Challenge, LFI to Root
June 11, 2026
A boot-to-root walkthrough of VulnHub's 42Challenge that chains a client-side filter bypass, local file inclusion, log poisoning, a stray shadow backup and a...
linux (1)
Anatomy of a Backdoor: The XZ Utils Supply-Chain Attack (CVE-2024-3094)
June 13, 2026
The story of CVE-2024-3094: how an attacker spent two years earning maintainer trust in XZ Utils, hid a backdoor in its build scripts and test files that hij...
llm (1)
Can a Local Coding Model Do Threat Intel? Benchmarking Qwen3-Coder-Next on AthenaBench
July 9, 2026
Benchmarks an 8-bit Qwen3-Coder-Next running fully offline on AthenaBench's six threat-intel tasks. It scores 49.0 combined, the strongest open-weights resul...
local models (1)
Can a Local Coding Model Do Threat Intel? Benchmarking Qwen3-Coder-Next on AthenaBench
July 9, 2026
Benchmarks an 8-bit Qwen3-Coder-Next running fully offline on AthenaBench's six threat-intel tasks. It scores 49.0 combined, the strongest open-weights resul...
ludus (2)
Automated Cyber Range Deployments with Ludus and Claude, Part 1: Building a Range You Can Watch
September 30, 2026
Part 1 of a running log of building a cyber range by describing it to Claude Code connected to Ludus. Covers installing Ludus, deploying a segmented six-VM r...
Automated Cyber Range Deployments with Ludus and Claude, Part 2: Watching It, and Getting It Right
September 30, 2026
Part 2 adds a Wazuh SIEM on its own SOC VLAN, then reviews the whole build carefully, including a version pin meant to keep the agents in step with their man...
mavlink (1)
MAVLink Has No Idea Who You Are: Drone Autonomy on an Unauthenticated Link (Part 1)
September 5, 2026
Part 1 of a series on drone link security. Builds a simulated ArduPilot lab and the MAVIO workbench to measure what an unauthenticated MAVLink link exposes, ...
networking (1)
iSCSI Applications & Security
February 8, 2025
How iSCSI delivers block storage over ordinary Ethernet, how to attach LUNs to ESXi as datastores, and the controls it needs to run safely: CHAP authenticati...
opencode (1)
Where Was I? Breadcrumb: Finding and Resuming OpenCode Sessions Across Machines
September 21, 2026
Introduces Breadcrumb, a small daemon-free tool that records where each opencode session lives, the git state of its workspace and a gist of the last prompt,...
opensource (2)
Anatomy of a Backdoor: The XZ Utils Supply-Chain Attack (CVE-2024-3094)
June 13, 2026
The story of CVE-2024-3094: how an attacker spent two years earning maintainer trust in XZ Utils, hid a backdoor in its build scripts and test files that hij...
Your Dependencies Shipped Features Too
October 9, 2026
Dependency review is rightly built around security patches. Every upstream release also ships capabilities we could adopt. A Go 1.22 routing example shows ho...
pentest (1)
Walkthrough: VulnHub 42Challenge, LFI to Root
June 11, 2026
A boot-to-root walkthrough of VulnHub's 42Challenge that chains a client-side filter bypass, local file inclusion, log poisoning, a stray shadow backup and a...
proxmox (2)
Automated Cyber Range Deployments with Ludus and Claude, Part 1: Building a Range You Can Watch
September 30, 2026
Part 1 of a running log of building a cyber range by describing it to Claude Code connected to Ludus. Covers installing Ludus, deploying a segmented six-VM r...
Automated Cyber Range Deployments with Ludus and Claude, Part 2: Watching It, and Getting It Right
September 30, 2026
Part 2 adds a Wazuh SIEM on its own SOC VLAN, then reviews the whole build carefully, including a version pin meant to keep the agents in step with their man...
secureboot (1)
The Importance of Secure Boot
December 24, 2024
What UEFI Secure Boot checks at startup, how to add your own applications, OS files and kernel modules without turning it off, and how to detect whether it i...
series (3)
Automated Cyber Range Deployments with Ludus and Claude, Part 1: Building a Range You Can Watch
September 30, 2026
Part 1 of a running log of building a cyber range by describing it to Claude Code connected to Ludus. Covers installing Ludus, deploying a segmented six-VM r...
Automated Cyber Range Deployments with Ludus and Claude, Part 2: Watching It, and Getting It Right
September 30, 2026
Part 2 adds a Wazuh SIEM on its own SOC VLAN, then reviews the whole build carefully, including a version pin meant to keep the agents in step with their man...
MAVLink Has No Idea Who You Are: Drone Autonomy on an Unauthenticated Link (Part 1)
September 5, 2026
Part 1 of a series on drone link security. Builds a simulated ArduPilot lab and the MAVIO workbench to measure what an unauthenticated MAVLink link exposes, ...
siem (1)
Automated Cyber Range Deployments with Ludus and Claude, Part 2: Watching It, and Getting It Right
September 30, 2026
Part 2 adds a Wazuh SIEM on its own SOC VLAN, then reviews the whole build carefully, including a version pin meant to keep the agents in step with their man...
simulation (1)
MAVLink Has No Idea Who You Are: Drone Autonomy on an Unauthenticated Link (Part 1)
September 5, 2026
Part 1 of a series on drone link security. Builds a simulated ArduPilot lab and the MAVIO workbench to measure what an unauthenticated MAVLink link exposes, ...
ssh (1)
Anatomy of a Backdoor: The XZ Utils Supply-Chain Attack (CVE-2024-3094)
June 13, 2026
The story of CVE-2024-3094: how an attacker spent two years earning maintainer trust in XZ Utils, hid a backdoor in its build scripts and test files that hij...
supply chain (2)
Anatomy of a Backdoor: The XZ Utils Supply-Chain Attack (CVE-2024-3094)
June 13, 2026
The story of CVE-2024-3094: how an attacker spent two years earning maintainer trust in XZ Utils, hid a backdoor in its build scripts and test files that hij...
Your Dependencies Shipped Features Too
October 9, 2026
Dependency review is rightly built around security patches. Every upstream release also ships capabilities we could adopt. A Go 1.22 routing example shows ho...
threat intel (1)
Can a Local Coding Model Do Threat Intel? Benchmarking Qwen3-Coder-Next on AthenaBench
July 9, 2026
Benchmarks an 8-bit Qwen3-Coder-Next running fully offline on AthenaBench's six threat-intel tasks. It scores 49.0 combined, the strongest open-weights resul...
tutorial (1)
Walkthrough: VulnHub 42Challenge, LFI to Root
June 11, 2026
A boot-to-root walkthrough of VulnHub's 42Challenge that chains a client-side filter bypass, local file inclusion, log poisoning, a stray shadow backup and a...
typescript (1)
Where Was I? Breadcrumb: Finding and Resuming OpenCode Sessions Across Machines
September 21, 2026
Introduces Breadcrumb, a small daemon-free tool that records where each opencode session lives, the git state of its workspace and a gist of the last prompt,...
uefi (1)
Understanding BIOS Types - Legacy BIOS, EFI, and UEFI
January 12, 2026
A tour of PC firmware from Legacy BIOS through EFI to UEFI: how each one boots the machine, where each falls short, and why the differences matter for securi...
vulnhub (1)
Walkthrough: VulnHub 42Challenge, LFI to Root
June 11, 2026
A boot-to-root walkthrough of VulnHub's 42Challenge that chains a client-side filter bypass, local file inclusion, log poisoning, a stray shadow backup and a...
wazuh (1)
Automated Cyber Range Deployments with Ludus and Claude, Part 2: Watching It, and Getting It Right
September 30, 2026
Part 2 adds a Wazuh SIEM on its own SOC VLAN, then reviews the whole build carefully, including a version pin meant to keep the agents in step with their man...