Weekly security intelligence
A weekly roundup of what actually broke, deep dives into how it worked, and hands-on courses where you try it yourself.
Prefer it by email? One issue a week, free — no sponsors, one-click unsubscribe.
The write-up we think is worth your time right now.
Credential stuffing is not brute force. Understanding the difference is what makes it detectable — and what makes most rate limits useless against it.
Read the write-up
Deep dives into incidents, tooling, and technique.
Opening a pcap for the first time is overwhelming by design — it shows you everything. Here is the small set of filters and habits that turn noise into a narrative.
The failure is not that users are careless. It is that push approval asks a question the user has no way to answer correctly — and asks it dozens of times until they slip.
We spent a decade teaching everyone to be suspicious of their inbox. Attackers responded by picking up the phone — where nobody is watching, nobody was trained, and being helpful is literally in the job description.
Hands-on labs and games. Learn the attack by running it.
How phishing actually works, how to spot it under time pressure, and exactly what to do in the first ten minutes after someone clicks.
Curated by hand, every Tuesday.
Two browser extensions, a car alarm fitted at the dealership, and WordPress core itself. Almost nothing that went wrong this week came from outside — it came from things that were already installed and already trusted.
If that sounds useful, the whole thing fits in one email a week.
See what you'd get