These past few weeks have been pretty rough for me, as you might have seen. I recently just haven’t felt like myself. Haven’t felt like getting on the internet much at all. As a result of that, I haven’t been writing much articles/posts on the blog. I have been trying to get back into the groove of things, but it...

Sorry for another late post. It has been a busy week again plus I have just been taking a break from the internet. As a result, I haven’t been writing as much. The vibe A “touch grass” week in the best way. Less internet, more real life: catching up with a friend, upgrading a couple comfort essentials at home, and...

I have been seeing a noticeable increase in unwanted applications showing up on client endpoints lately. Not full-on ransomware. Not always an obvious infection. Just the annoying middle layer: adware, PUPs, and browser junk that eats time, breaks trust, and quietly expands the attack surface. WaveBrowser,...

Yesterday was a busy Monday so yet again, I am writing these notes on Tuesday. But hey, better late than never, right? Let’s dive into the weekly notes for week 7 of 2026! The vibe Practical, steady, and a little cozy: health check relief, home-office rhythm, sports on in the background, and just enough “new tool...

(Image generated using ChatGPT) I have spent years doing the boring, unsexy work of keeping systems safe: least privilege, logging, MFA, segmentation, the whole “trust nothing” routine that MSP and security folks live in. So when Ring used the Super Bowl LX stage on February 8, 2026 to pitch its AI-powered Search...

Let me preface this by saying… Let’s GO SUPER BOWL CHAMPS! 🏆🏈 My Seahawks did it! We got the revenge we’ve been waiting for. Okay now for the weekly notes. LOL The vibe A mostly steady, practical week with a lot going right, right up until one “helpful” automation reminded me that logs are sacred and the SOC has...

(Image generated with ChatGPT) At 1:15 a.m. on 2/8, my phone lit up like it was auditioning for a disaster movie. Our SOC was calling in full panic mode: “Something is clearing activity on endpoints. We’re seeing logs getting wiped.” My brain did the normal triage routine: compromise? lateral movement? attacker...

A SIEM is supposed to help you see an attack while it’s still unfolding, not three weeks later during a postmortem. In practice, a lot of SIEMs end up as expensive log warehouses that nobody wants to touch unless something is already on fire. This post breaks SIEM down into the real pipeline: how telemetry gets...

A buddy in infosec recently asked a question that hits the painful truth about containers: they feel disposable right up until you need evidence. “What logs need to be collected and what’s the best way to snapshot for further digging?” The trick is thinking in layers. A container is rarely “the whole crime scene.”...

I really need to start keeping some sort of daily log so I can remember what the heck I did throughout the week. My memory is terrible. The vibe A steady, practical week of tuning the knobs: comfort, focus, and craft, one small improvement at a time. Highlights I got a new keyboard in from Redragon that I am...

Some nights I open my blog folder the way you open the fridge. Not because I’m starving, but because I need to see what’s in there. A half-finished draft. A headline that felt clever yesterday. A note to myself that just says “add screenshot here” like that’s a complete thought. The usual. I’ve always liked reading...

Cybersecurity Weekly Roundup — the week’s biggest security news, distilled into signal and next steps. (Image generated with ChatGPT) 🧭 Overview The last seven days came in hot. Fortinet pushed fixes for an actively exploited FortiCloud SSO auth bypass, Microsoft shipped an emergency Office patch, and Ivanti EPMM...