Radar #18: Week of 04/27/2026
The Low Orbit Security Radar is a weekly security newsletter from an offensive practitioner's perspective with curated news stories and links worth your time.
Low Orbit Security
Tailored Security Solutions.
Latest posts
Radar #17: Week of 01/12/2026
The Low Orbit Security Radar is a weekly security newsletter from an offensive practitioner's perspective with curated news stories and links worth your time.
Radar #16: Week of 01/05/2026
The Low Orbit Security Radar is a weekly security newsletter from an offensive practitioner's perspective. One idea, curated news, and links worth your time. News: There Were BGP Anomalies During The Venezuela Blackout When watching the situation in Venezuela unfold, the phrase " It was dark, the lights
Radar #15: Week of 12/29/2025
The Low Orbit Security Radar is a weekly security newsletter from an offensive practitioner's perspective. One idea, curated news, and links worth your time. Idea: The Window Is Broken Though the MongoBleed vulnerability (explained below) caused quite a stir because a POC was released on Christmas Day, the
Radar #14: Week of 12/22/2025
The Low Orbit Security Radar is a weekly security newsletter from an offensive practitioner's perspective. One idea, curated news, and links worth your time. This Week $ radar --status SIGNAL: REACQUIRED LAST_TX: 01/27/2025 STATUS: OPERATIONAL [Low Orbit Radar, back online] We've had a gap
Radar #13: Week of 1/27/2025
A shorter post this week for reasons that will become obvious in the near future. Show Not Tell Lately, I've been putting a lot of thought into offensive security . There are so many useful areas of security, such as GRC, security operations, and detection engineering. Why am I
Radar #12: Week of 1/20/2025
"We don't have enough people in this industry" - The industry that keeps raising the bar When making what is likely the largest purchase of your life, hiring a home inspector to make sure a home is safe is standard procedure. Yet, we don't require
Radar #11: Week of 1/13/2025
A short and sweet post this week. Enjoy. The Pros of Cons The final  Shmoocon  was this weekend in Washington DC. The event had three ticket drops which sold out in less than 8 seconds. Some metrics: 11/01/2025 - 650 Tickets : Sold out in 7.15 seconds
Radar #10: Week of 1/5/2025
2025 Predictions 1. Kubernetes Security Challenges Spoiler, Kubernetes security has been my primary focus for almost two years. I've seen many security challenges when dealing with Kubernetes and cloud native infrastructure. From speaking to hundreds of people about these challenges, it's clear that there needs to
Radar #9: Week of 12/30/2024
Exception Based Security In the US, cigarettes, nicotine gum, and other vices typically must be purchased by talking to an employee authorized to sell the item. A minor inconvenience not aimed at stopping the sale, just controlling and discouraging who can access potentially risky vices. Security teams can borrow from
Radar #8: Week of 12/23/2024
Finding What To Work On I recently had a discussion where someone asked a seemingly simple question: “How do you know what to work on”. The answer is not immediately obvious until you’ve found yourself working on something useful, but there are some general guidelines I
Radar #7: Week of 12/16/2024
The Threat and Opportunities Of AI The Pandora’s box of Artificial Intelligence has been opened, what does that mean for us mere mortals? Anecdotally, I’ve found that having a conversation with an LLM is like having a conversation with someone who has been learning something for
Radar #6: Week of 12/9/2024
The Wiretap: China Has Infiltrated Police Wiretap Systems Actors associated with the Chinese threat actor group tracked as Volt Typhoon accessed telecommunication systems that are utilized for lawful intercept , a feature that allows law enforcement with legal authorization to intercept communications, a requirement established by CALEA : The Communications Assistance for
Radar #5: Week of 11/25/2024
2024 CISO Compensation Report IANS released the 2024 CISO compensation report in October and while I recommend reading through it (especially if this is the world you are in) here are the main compensation numbers: $403k (Median), $565k (Average), $1.02M (Top 10%). There is nothing too surprising here, CISOs
Radar #4: Week of 11/18/2024
PyPI now supports digital attestations PyPI, the repository searched by the pip command for packages, announced it now supports digital attestations – a method for cryptographically verifying a Python package to the repository it came from. This is generally a step in the right direction, but there have been discussions