Notes from the field

Writing

Practical perspectives on cybersecurity, application protection, APIs, and cloud infrastructure.

Featured article

Barracuda ESG Exploitation: Treat Internet-Exposed Admin Interfaces as an Incident

Barracuda confirms active exploitation of a chained ESG flaw. Learn which devices are exposed, why it matters, and the actions security teams should take.

Read article
Browse by topic

Article archive

A Shared Hosting Breach Shows Why Tenant Isolation Cannot Be a Single Control

Hostinger’s shared-hosting incident shows why tenant isolation, rapid containment and customer credential protection must be treated as one response problem.

Shared hostingTenant isolationIncident responseCloudLinuxZero-day
Read article

Iris Plaza Cloud Breach Shows Why Third-Party Data Risk Is an Operational Risk

Iris Plaza’s cloud breach shows why third-party data inventories, shutdown playbooks and credential-risk controls matter after a breach at scale for retailers.

Data BreachThird-Party RiskCloud SecurityIncident ResponseRetail Security
Read article

SonicWall SSL VPN MFA Bypass Is Being Exploited—Why Identity Architecture Now Becomes the Priority

Actively exploited SonicWall SSL VPN flaw CVE-2026-19868 can bypass SAML MFA. What it means, who is exposed, and what to do now.

SonicWallVPN SecurityMFAVulnerability ManagementZero Trust
Read article

DDoS attacks: how they work and how to prepare

A practical guide to distributed denial of service attacks, the different ways they disrupt services, and how organizations can prepare and respond.

DDoSincident responseapplication security
Read article