The Anonymity Playbook
Journalists, sources, activists and anyone whose privacy has stakes
Cyber Security, Without the Jargon
Cybersecurity doesn't have to be complicated. I am here to break down concepts, threats, tips, and tools in simple language. For mere mortals and developers alike.
Since I have been asked this a lot: The best way to support this site, is to buy my books.
Books by the author
Compare all 5-
-
The Digital Fortress
Anyone protecting their own money, accounts and family online
-
Secure Software Development
Developers shipping production code under delivery pressure
-
The Secure Harness
Teams running AI coding agents in repositories others depend on
-
The AI Native Engineer
Engineers taking AI features from a working demo to production
As an Amazon Associate I earn from qualifying purchases. Buying through these links costs you nothing extra and helps pay for the blog.
Latest Posts
Docker Patched Two Sandbox Flaws. Check the Shared Folder Next
| 21 min read
For Developers Two Docker Sandboxes flaws crossed the line between an AI coding agent and its host. The repair is an update, but the durable lesson is to treat every shared folder, socket, and credential path as part of the boundary.
Radaris Lost Its Domain. Your Address May Still Be Easy to Find
| 21 min read
For Experts A court transferred Radaris.com after a New Jersey privacy case. Here is what that changes, what it leaves behind, and how to reduce a people-search trail without mistaking one removal for invisibility.
When the Network Gatekeeper Cannot Vouch for Itself
| 17 min read
For Developers Cisco fixed an actively exploited flaw in Identity Services Engine. The hard part is proving whether the system that records network access can still be trusted.
Chosen Brick Shows Why a Familiar Message Needs a Second Channel
| 18 min read
For Experts Iran-linked operators used researched conversations and convincing files to put spyware on Windows computers. The useful defence starts before the download, with a separate-channel check that preserves both the message and the device.
Chrome’s Latest Zero-Day Fix Needs One More Click
| 19 min read
For Mortals Google has fixed a Chrome flaw already used in attacks. The useful response is calm and small: update, relaunch, and check the version that is actually running.
The Cisco Email Gateway Patch Needs an Outside View
| 20 min read
For Developers Cisco fixed an email-parsing flaw already used in attacks. Teams should patch every gateway, then investigate from logs the gateway could not rewrite.
The Revolut Breach Shows Why a Real Government Email Still Needs a Second Check
| 22 min read
For Experts Revolut released sensitive customer records after fraudulent requests arrived from a legitimate government agency email domain. The failure offers a practical lesson for every team that handles official demands for data.
After the AdaptHealth Breach, Check the Record Credit Monitoring Misses
| 20 min read
For Mortals AdaptHealth says a June attack exposed health and insurance information for more than 4.1 million people. Here is what affected patients should check, why credit monitoring covers only part of the risk, and when to escalate.