Research by: Jiří Vinopal (@vinopaljiri) Abstract What if a trusted security component could be repurposed into an attacker-controlled kernel primitive? What if a signed Microsoft remediation driver could be instructed…
When your user experiences a connectivity issue visiting your website, it’s unlikely that you’ll see a trace of it in your server logs. DNS resolution failures happen before your user…
“Backed by joint investments, more than 2,000 certified experts, as well as dedicated forward deployed engineers, the alliance will deliver a seamless approach to streamline deployments and speed client outcomes….
Recently I was asked to offer my opinions on Application Performance Management (APM) and Observability (o11y) – how they overlap, compete, and conflict. I was just one of several folks…
Overview On August 19, 2026, a security advisory was published for CVE-2026-19490, a critical authentication bypass vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway. The vulnerability carries a CVSS v4.0…
QKD – Quantum key distribution is the magic part of quantum cryptography. Every other part of this new cryptography mechanism remains the same as in standard cryptography techniques currently used. By…
Over the years I have signed off on process redesigns I was pleased with. The team had done the work properly: we mapped the current state, cut the handoffs, agreed the new…
Crime script analysis is a narrative-driven technique that can be used alongside, or as an alternative to, tactics, techniques, and procedures (TTPs) — creating human-readable stories that describe attacks in a way…
AI coding tools changed shape over the last two years. The first wave suggested the next line of code inside an editor. The current wave can take a whole task,…
If you have ever watched a CI job sit on “Fetching repository …” while nothing seems to happen, you already know the unglamorous truth about continuous integration: Every job begins…
