The Digital Fortress
Anyone protecting their own money, accounts and family online
Buy on Amazon Buy the book now What's in it, and who it's for
Cyber Security, Without the Jargon
Cybersecurity doesn't have to be complicated. I am here to break down concepts, threats, tips, and tools in simple language. For mere mortals and developers alike.
Since I have been asked this a lot: The best way to support this site, is to buy my books.
Books by the author
Compare all 5-
-
The Anonymity Playbook
Journalists, sources, activists and anyone whose privacy has stakes
Buy on Amazon Buy the book now What's in it, and who it's for -
Secure Software Development
Developers shipping production code under delivery pressure
Buy on Amazon Buy the book now What's in it, and who it's for -
The Secure Harness
Teams running AI coding agents in repositories others depend on
Buy on Amazon Buy the book now What's in it, and who it's for -
The AI Native Engineer
Engineers taking AI features from a working demo to production
Buy on Amazon Buy the book now What's in it, and who it's for
As an Amazon Associate I earn from qualifying purchases. Buying through these links costs you nothing extra and helps pay for the blog.
Latest Posts
The Cisco FMC Hotfix Needs an Incident Receipt
| 19 min read
For Developers Cisco has confirmed active exploitation of a Secure Firewall Management Center flaw that can give a remote attacker root access. The hotfix closes the route, but operators also need to check the earlier exposure window and preserve an incident record.
After a Record Patch Tuesday, Your Windows Update Needs a Receipt
| 21 min read
For Mortals Microsoft fixed two Windows flaws already being used in attacks on 8 September 2026. Here is how to install the right update, finish the restart, and check the result without getting lost in a record patch count.
The Six-Hour AI Attack Is a Response-Clock Test
| 19 min read
For Developers Google observed criminals turn a stolen cloud foothold into a mass credential-harvesting operation in less than six hours. The useful lesson is about authority, outbound traffic, and how quickly defenders can contain a machine-speed campaign.
Project Zenith Puts AI on the PC. Its Security Boundary Is Still a Preview
| 20 min read
For Developers Microsoft is pairing local AI hardware with agent identity and execution containers. The useful lesson is to test the actual boundary, not trust the product label.
After the Mathspace Breach, Give School Messages a Callback Rule
| 20 min read
For Mortals Mathspace says more than one million students, families, and staff were affected. Here is what the exposed account data can and cannot do, and the calm family check that matters now.
Your MikroTik Router Needs an Update and a Door Check
| 18 min read
For Mortals Attackers are taking over some MikroTik routers whose remote-management door is open to the internet. Here is how to update safely, check for changes, and decide how much cleanup is justified.
StyleSmuggler: Patch Status Cannot Clear a Store
| 19 min read
For Developers Magento stores were compromised through an unpatched flaw even while running current security updates. Here is how to separate blocking the next request from investigating the first one.
The Exchange Patch Needs an Entitlement Check
| 19 min read
For Developers Nearly 22,000 Exchange servers were still exposed after a fix shipped. The practical problem is bigger than one patch: teams must prove the running build, support entitlement, and replacement path together.