I spent some time reading the 2026 Cyber Protect Report, and the biggest thing that stuck with me was not AI, nation-state actors, or some brand-new attack technique. It was the reminder that most organizations are still getting burned by the same old problems. Weak authentication. Slow patching. Overprivileged...

The tension I keep coming back to I recently read Joel’s post, “Unpolished human websites”, and it hit on something I think a lot of us who care about the independent web have felt for a while now. He is not wrong. Part of what makes personal websites interesting is that they still feel like a person made them. Not...

The vibe A grounded weekly note with a little whiplash. Mostly everyday family life, then suddenly a wild neighborhood story that shifts the whole mood. Highlights I picked up my new glasses this week. I knew there was a reason I usually go with a more plastic frame…my lenses are huge and this metal frame shows...

Photo by Jakub Żerdzicki on Unsplash I have profiles on Trakt, Letterboxd, Serializd, and Simkl. So this is not one of those posts where I picked a favorite without actually trying the alternatives. I have used all of them enough to know what each one does well. And to be fair, each one does do something well. But...

For years, the home router has been treated like an appliance you set up once and then forget about. That was always a mistake. This week, the FCC updated its Covered List to include foreign-made consumer routers, which means new models in that category are blocked from receiving FCC authorization unless they...

A child’s first email address might not sound like a cybersecurity topic, but I think it absolutely is. In security, we talk all the time about identity, access, exposure, and long-term risk. An email address sits right in the middle of all four. It becomes a login, a recovery method, a communication channel, and...

The vibe Life maintenance and finish-line energy. Highlights My final class of my BSIT degree started on Tuesday. I am so glad that I am finally at the end of this journey! It has been a long road and frankly here towards the end, it has been a bit of a slog. I am looking forward to being done and moving on to the...

A while back I realized most people only care about network diagrams in two moments: when they have to explain the network to someone else, and when something is broken and nobody remembers how the network is actually put together. For a long time, I treated diagramming like “nice to have” documentation. Useful,...

Another week coming in late with this one. The vibe Reflective, slightly overstimulated, but ending on a better note. Highlights Had my annual eye exam. My eyes didn’t change too much, I did get some new contacts though. I have been wearing my glasses again ever since I ran out of contacts quite a while ago and just...

Most security news dies the death of a boring patch notice. This one should not. Why this story matters The recent wave of exploitation targeting Cisco SD-WAN systems matters because it is not just about one vendor having a bad month. It is a sharp reminder that when attackers get into the management plane of a...

Old network edge devices often stay in place far longer than they should, creating technical debt and unnecessary security risk I keep coming back to the same thought lately: a lot of cybersecurity risk is not hiding in some mysterious zero-day fog machine. A lot of it is sitting right at the edge of the network,...

(Image generated using ChatGPT) A lot of security awareness advice still acts like phishing begins and ends in the inbox. That is not the world we are working in anymore. Lately, the attack path has looked a lot more like this: flood a user’s inbox with junk, call them while they are frustrated, message them in...