Cybersecurity

I made my Google account so secure I could lock myself out

Oh, memories! I've had my Google / Gmail account for over 20 years now. I can't even find the orig…

Inside a Russian-speaking operator's toolkit for compromising Ukrainian IP cameras

Hunt.io researchers analyzed two open directories recovered through Attack Capture system and recons…

The Agent Who Won't Say Its Name

Originally published at avalayer.com/writing, Field Notes 003. Last Sunday a piece of software post…

Before you ask what an AI skill does, ask who made it

You already do this for dependencies. Before npm install, some part of your brain checks the weekly …

Protecting Smart Home Devices from Hackers with VPNs

Protecting Smart Home Devices from Hackers with VPNs The world of smart home devices has revolutio…

I tested whether agents leak secrets without being asked — and whether my scanner catches it when they do

This is a follow-up to the 0.2.0 release. That post covered what the scanner ships; this one covers …

How to block XSS credential theft via selective SubtleCrypto prototype manipulation

Hi everyone, In modern enterprise web applications (especially FinTech and non-custodial Web3 platf…

New StormEncryptor ransomware used by former Medusa affiliate

A financially motivated threat actor previously associated with the Medusa ransomware operation is n…

AI Security Training for Defense Industrial Base Companies

A defense contractor's AI security problem is not a bank's, and the difference is controlled unclass…

Finally not shadow-banned anymore 😇

I was tired of clunky PGP tools, so i built my own cross-platform solution: PGP Manager …

Dissecting a Sophisticated Web3 Supply Chain Attack: How Scammers Built a Commercial dApp to Target Developers

Following up on my previous analysis of Web3 attack vectors, I recently encountered another sophisti…

AWS Daily Digest — August 10, 2026

☁️ AWS Daily Digest · August 10, 2026 Auto-generated · Groq (Llama 3.3 70B) · Free & Open-Source 7…