The Digital Fortress
Anyone protecting their own money, accounts and family online
Buy on Amazon Buy the book now What's in it, and who it's for
Cyber Security, Without the Jargon
Cybersecurity doesn't have to be complicated. I am here to break down concepts, threats, tips, and tools in simple language. For mere mortals and developers alike.
Since I have been asked this a lot: The best way to support this site, is to buy my books.
Books by the author
Compare all 5-
-
The Anonymity Playbook
Journalists, sources, activists and anyone whose privacy has stakes
Buy on Amazon Buy the book now What's in it, and who it's for -
Secure Software Development
Developers shipping production code under delivery pressure
Buy on Amazon Buy the book now What's in it, and who it's for -
The Secure Harness
Teams running AI coding agents in repositories others depend on
Buy on Amazon Buy the book now What's in it, and who it's for -
The AI Native Engineer
Engineers taking AI features from a working demo to production
Buy on Amazon Buy the book now What's in it, and who it's for
As an Amazon Associate I earn from qualifying purchases. Buying through these links costs you nothing extra and helps pay for the blog.
Latest Posts
Your UniFi Dashboard Is a House Key
| 19 min read
For Mortals Ubiquiti has fixed a large group of serious UniFi flaws affecting network consoles, cameras, phones, and other systems. Here is the calm version check that homes and small businesses should make now.
This Marimo Notebook Could Run a Command Before You Ran a Cell
| 16 min read
For Developers A fixed Marimo flaw let a crafted notebook start a local command when someone opened it for editing. The practical lesson is simple: notebook configuration belongs inside the code-review boundary.
AliExpress Used Silent Audio to Read a Browser Fingerprint
| 20 min read
For Experts A shopping page ran an inaudible audio test that helped describe a visitor’s device. Here is what the finding proves, what it does not prove, and how to make browser tracking less reliable.
When One WordPress Plugin Name Hides Seven Patch Lines
| 17 min read
For Developers miniOrange fixed two WordPress login flaws, but six paid editions sat outside the public advisory. Here is how to find the real version, patch it, and check what happened before the fix.
A Face Scan Lasts Seconds. The Public Rule Must Last Longer
| 21 min read
For Experts Nottinghamshire Police has begun scanning faces in public against a watchlist. Here is what the system does, what deletion cannot undo, and which records the public should demand before the next deployment.
Grok Read the Hidden Instructions. Its Tools Made Them Dangerous
| 19 min read
For Developers A new Grok proof of concept hid instructions inside encrypted text, then used the model’s own runtime to reveal and act on them. The durable fix is to distrust derived content and control what tools can do with it.
An Expired Card Still Needs a Kill Switch
| 22 min read
For Mortals Researchers revived some expired Visa contactless cards by changing the date a checkout terminal read. The practical lesson is simple: report missing cards and destroy the chip in old ones.
The Android Screen in Your Car Deserves an Update Check
| 22 min read
For Mortals Researchers found malware delivered through the updater on some DoFun-based Android car screens. Here is what owners should check, without treating every dashboard as a driving emergency.