Cyber Security

Vulnerability advisories, hardening guides, and security engineering field notes — written by the team that runs pentests and answers the incidents.

field notes

Cyber Security

6 July 2026 · 8 min read

Zero Trust, in practice: beyond the buzzword

The perimeter is dead, but most architectures haven't noticed. What Zero Trust actually means in practice — identity over network location, mTLS and microsegmentation — and how to roll it out without buying a box.

Cyber Security

4 July 2026 · 8 min read

Getting quantum-ready: a practical migration to post-quantum crypto

Harvest-now-decrypt-later has already started the clock. Crypto-agility over any single algorithm, hybrid ML-KEM key exchange, and finding the cryptography you can't see.

Cyber Security

20 June 2026 · 8 min read

Securing the software supply chain: SBOMs, provenance, and signing

Your dependencies are the attack surface now. SBOMs you can query at 2am, SLSA provenance and signing, and what SolarWinds and the xz backdoor actually teach.