The Known Good — Field Notes

New York's 911 Failure Didn't Look Like a Failure. That's the Problem.

Aug 20, 202610 min read830

What the Teams Vishing Research Looks Like From a 911 Center

Jul 31, 20268 min read234

Stop Saying Vibe Coding Is Easy

Field note. This one is commentary, not reference data. It is my own account of building The Known Good, and everything in it is a thing that happened to me. No benchmarks, no citations, no dataset behind it.

Aug 26, 202611 min read17

Hugging Face Wasn't the Target. It Was in the Way.

Jul 21, 20266 min read28

Delaware County's Cyberattack and the Missing 911 Boundary

Jul 20, 20269 min read13

When the Router Exfiltrates Its Own Configuration

A stolen router configuration can expose credentials and trusted management paths long after the device has been rebuilt.

Jul 18, 20265 min read13

AI Worked Both Sides of the Ledger This Week. The Lesson Isn't "Patch Faster."

AI found the bugs and became one in the same seven days. The failure underneath every story wasn't patch speed -- it was the trust model.

Jul 17, 202611 min read38

Pennsylvania Says Its Statewide 911 Disruption Wasn't a Cyberattack. The Alternative May Be Harder to Defend Against.

One software defect, four redundant instances, statewide impact. Why "not a cyberattack" is the harder problem -- and what it means for dispatch, IT, and procurement.

Jul 15, 202611 min read492

PamStealer Skips the Process Chains Defenders Watch. Not All of Them.

A macOS stealer that routes its most detectable stages -- the download, the credential check, the keychain read -- through native frameworks to skip the process chains defenders key on. Quieter than most commodity stealers. Not quiet.

Jul 2, 20269 min read23

Your Agent Framework Is a Pile of API Keys on a Public IP

The low-code AI tooling everyone stood up in 2025 is now external attack surface -- and attackers are reaching it in hours.

Jul 1, 20269 min read10

There's No Patch for FortiBleed. Public-Sector Networks Are Where That Hurts Most.

No CVE, no patch -- a credential campaign that harvests the exact conditions under-resourced government and public-safety networks tend to produce.

Jun 27, 202612 min read4

Command Palette

Latest articles