Security Engineering
Zero Trust on a $0 Budget, Part 1: Setting Up Cloudflare One's Free PlanUntil this week, I had no remote access setup at all. No VPN, no port forwards, no filtering. My Mac was protected by …
// Latest Intelligence
Recent Posts
OS Weekly
OS Weekly: Node2Shell, Stolen AI Keys & Poisoned Dev ToolsThis week’s theme is the stuff developers trust by default: a compression library, a hosting platform holding your …
AI and Security
The Harness Is the Product: What Cloudflare's Vulnerability Harness Teaches AppSec TeamsMost of the conversation about AI and vulnerability research is about models. Which one found the most bugs, which one …
OS Weekly
OS Weekly: PHP2Shell, a Secure Boot Bypass & the Help Desk ProblemTwo themes ran through this week. First, speed: PHP shipped emergency fixes for two critical flaws, and within days …
AI and Security
When the Agent Is the Incident: NIST, NSA, and CISA's 10 Key Practices for SI Incident ResponseEvery incident response playbook you’ve ever written assumes the same cast. There’s an attacker, …
Vulnerability Management
PHP2Shell: What We Know About CVE-2026-109618 and CVE-2026-109619, and What to Do TodayOn October 20, two critical vulnerabilities in PHP core leaked a day before their planned disclosure. They’re …
// From the Store