Archive
New York's 911 Failure Didn't Look Like a Failure. That's the Problem.
What the Teams Vishing Research Looks Like From a 911 Center
Hugging Face Wasn't the Target. It Was in the Way.
Delaware County's Cyberattack and the Missing 911 Boundary
When the Router Exfiltrates Its Own Configuration
AI Worked Both Sides of the Ledger This Week. The Lesson Isn't "Patch Faster."
Pennsylvania Says Its Statewide 911 Disruption Wasn't a Cyberattack. The Alternative May Be Harder to Defend Against.
PamStealer Skips the Process Chains Defenders Watch. Not All of Them.
Your Agent Framework Is a Pile of API Keys on a Public IP
There's No Patch for FortiBleed. Public-Sector Networks Are Where That Hurts Most.
Four Failures, One Excuse: "Patch Faster" Was Never the Answer
Vibe Coding Isn't the Problem. Not Understanding the Stack Is.
I Handed Claude Code the Keys. Turns Out I'm Not the Only One Using Them.
The Circuit Nobody Could Find: How Exact-Match Searching Nearly Cost Me the Audit
The HTTP/2 Bomb Sat in Plain Sight for a Decade. An AI Just Had to Read the Code.
The Copilot Meter Didn't Raise the Price. It Showed You the Bill.
Designing AI for a Teen Discord Server Without Turning It Into a Surveillance Machine
WhatsApp Says No One Can Read Your Messages. A Federal Agent Spent 10 Months Disagreeing.
The Patch Queue Is the New Vulnerability
The Week the Toolchain Became the Kill Chain
ShinyHunters Didn't Breach 9,000 Schools. They Breached One Vendor. Your Institution Inherited the Rest.
The Floor Has Been Hit: Navigating the 2026 Systems Engineering Realignment
I Handed Claude Code the Keys to a Fresh VM and Walked Away. Here's What Broke.
I Built a Safe AI Workspace for My Autistic Teenager. Here's Everything That Broke Along the Way.