🧭 Overview It’s been another eventful week across the cybersecurity landscape — from critical vulnerabilities in cloud and VPN infrastructure to new ransomware tactics and growing concerns about AI-driven phishing. Below is a curated breakdown of the most important cyber and infosec stories from the past seven days,...

I am trying something new on my blog. I am going to start posting weekly notes. These will be a mix of personal and professional updates, as well as links to articles I have written or found interesting. I am hoping this will be a good way to keep my blog active and also share some of my thoughts and experiences...

On or around September 20, 2025, attackers compromised a third‑party customer service provider used by Discord. Discord reports that the intruder accessed data tied to support interactions for a limited set of users. Impacted users are being notified by email. If you got the notification: proceed through the steps...

npm logo TL;DR: In September 2025 a self‑replicating worm, tracked as Shai‑Hulud, turned the npm ecosystem into a lateral‑movement playground. Maintainer accounts were phished, popular packages were hijacked, new malicious versions propagated through CI/CD backdoors, and secrets were scraped to infect even more...

It’s been a punchy week. We saw a genuine crypto breakthrough from Signal, a flurry of high-severity patches across browsers and Cisco, and a policy change in Washington that could chill threat-intel sharing. Extortion crews are probing SaaS and supply chains, and ransomware continues to hit operations. For MSPs and...

Unlock the perfect brew of design, performance, and developer experience with Brewventy, a fully customizable Eleventy starter kit. Whether you’re launching a personal blog, documentation site, or simple landing page, Brewventy provides a coffee-inspired theme, easy theming system, and deployment-ready tooling—so...

Quick disclaimer: Mastodon does not provide a master list of “who blocked me.” That is a privacy and anti-harassment design choice. You can only verify specific accounts, and you can sometimes see if specific servers publish that they block your home instance. Treat this as a diagnostic guide, not a call-out kit....

Forgive me for the last few weeks of absence. I have been sick with pneumonia and have had some back back problems that have made it hard to sit at a computer for long periods of time. I am on the mend now and hope to be back to my normal self. Let’s get back to it. It’s been another active week in cybersecurity....

TL;DR iPhone 17 finally brings ProMotion to the standard line, adds a sharper ultra-wide, and a clever new Center Stage front camera that reframes selfies and video. iPhone 17 Pro / Pro Max get a new aluminum unibody with a laser-welded vapor chamber and the longest optical-quality 8× zoom Apple’s shipped. iPhone...

First Impressions: Aggressive, Compact, Ready to Work The Redragon WYVERN K689 PRO wastes no time making a statement. Right out of the box, this compact, full-sized mechanical keyboard is without feeling cramped, minimalist without looking cheap, and clearly built to punch above its price point. The matte black body...

For the longest time, my blog lived on a variety of platforms, with the latest being OMG.lol. Having a history of web development, I wanted something cleaner, faster, and developer-friendly. I have had my eye on Eleventy for quite a while, I just needed time for one and a solid theme to start with. Enter Eleventy...

It’s been another active week in cybersecurity. Major exploits, ransomware movements, and high-impact vulnerabilities made headlines again. Here’s a rundown of the top 10 stories security professionals should be tracking right now. 1️⃣ MOVEit Vulnerability Returns: Progress Warns of Fresh Exploit (CVE-2025-4102)...