My personal blog
How a small Claude Code command turned an hour of pre-flight planning into a single line of input — and why the connective work between Stellarium, weather forecasts, and a target catalog is exactly what AI agents are actually useful for.
DarkSword: the ios exploit chain that spies and thieves are sharing Two full-chain iOS exploit kits discovered in a single month. That is where things stand as of March 2026....
Russian intelligence is hijacking signal and whatsapp accounts across europe Between February and March 2026, six government agencies across four countries published warnings about the same thing: Russian intelligence services...
How china built iran s surveillance state, and how IT fell apart For fifteen years, China and Iran assembled what looked like an unbreakable surveillance machine. ZTE signed a $130 million...
Full analysis of the European Commission draft guidance on the application of Regulation (EU) 2024/2847 (Cyber Resilience Act). The guidance provides non-binding interpretive clarifications across 9 thematic sections and 232 paragraphs, addressing scope, FOSS treatment, substantial modifications, support periods, product classification, cybersecurity risk assessment, remote data processing,…
Phase 2 expanded the EU cyber threat LLM benchmark from 3 to 7 models, 2 to 5 actors, and 20 to 48 scenarios (14,785 records). No systematic geopolitical bias found.
Between late January and late February 2026, at least seven Dutch government organisations were compromised or potentially compromised through exploitation of CVE-2026-1281, a critical (CVSS 9.8) unauthenticated remote code execution vulnerability in Ivanti Endpoint Manager Mobile (EPMM).