Writing about cybersecurity, tech and whatever else I find interesting.
A reflection on competing in the Cyber Battle Australia Grand Final with TAFE Queensland, covering teamwork, pressure, investigation, communication, and practical cybersecurity problem solving.
A simple web security review covering HTTPS, security headers, input handling, error messages, exposed files, dependencies, and abuse controls.
A small security lab showing how to investigate suspicious login activity using logs, timelines, user context, and basic incident response steps.
A simple checklist for improving Microsoft 365 security in a small business environment, with a focus on MFA, admin accounts, least privilege, audit logs, devices, and user access.
Discord audit logs are useful, but they do not show every detail moderators need. This post explains why I built Revinal and what it taught me about logging, permissions, and running a live service.
Google has patched CVE-2026-2441, a critical Chrome zero-day that was actively exploited in the wild. This post walks through how the vulnerability works, how exploitation chains are built, and what this incident tells us about browser security in real-world environments.
AI agent skills defined in SKILL.md files introduce a new supply chain attack surface. This article explains how prompt injection, malicious skill uploads, and registry abuse can turn simple markdown into an execution vector.
Clawdbot AI agents claim to automate tasks across local systems and cloud environments. This article analyses how agent-based AI tools operate, the cybersecurity risks they introduce, and why installing unverified agents can expose users to serious compromise.