Field Dispatches
Latest writing.
Let’s be real, blogging is dead. I kept this page for the OGs: 79 posts spanning 2016to present. Technical deep dives, industry takes, and things that needed to be said. For up-to-date hot takes & hot plates, visit LinkedIn, YouTube, or the Podcast.
CompetitiveAICloud SecurityAgentic AIBreachesIdentityZero TrustAI SecurityThreat ResearchVulnerability ManagementApplication SecurityWeb SecuritySupply ChainEndpoint SecurityVPNCyberwarfareNetwork SecurityNation-StateSaaS SecurityData BreachMalwareE-CommerceZscalerSD-WANSASEResilienceRansomwarePrompt InjectionVulnerabilitiesFirewallsData ProtectionBookSales EngineeringPEBCAK PodcastPartnershipsLeadershipGo-To-MarketSecurity OperationsAwardsIncident ResponseSocial EngineeringPhishingUncategorizedSSL/TLS InspectionSSL/TLS DecryptionDNSCrypto MiningVerzionL7 Web Application SecurityAccount Takeover ProtectionAnti-FraudIoTiRulesBrute ForceDoSDDoSWTF-Security NewsL3/L4 Network SecurityConferences
Cloudflare's Workers AI Leak: When the Shared Cache Isn't YoursBlack October: Nine AI Developer Platforms Breached, and Your API Keys Were the PrizeThe Binance Breach Started on a Laptop. Your Signing System Is Only as Safe as the Laptops That Can Reach It.Agentic Intrusions Are Now a Line in Breach Notices: Vapor Panda, ARTEX and ChainalysisCMS Weekend: Drupal Commerce Is Being Exploited, and WordPress Core Has an RCE Drawing 63,000 Attacks a DayA Trojanized 'Official' Claude Code Extension Hit the Cursor Marketplace. Your IDE Is a Supply Chain.Ivanti Connect Secure: The Rest of the Zero-Day Chain Is Now in KEV, and the Deadline Is MondayThe Next World War May Start With a Prompt, Not a MissileBlind the Logs, Crash the VPN: Two Exploited Bugs This Week That Don't Steal Anything by ThemselvesEMBRACE: The Browsers Inside Your AI Coding Tools Were Trusted Like the Real ThingGitLab CVE-2026-97229: A CVSS 10 in the CI Regex Engine Is Now Exploited, and CISA Wants It Fixed by SundayPalo Alto Confirms PHP2Shell Is Being Exploited Against PAN-OS Management InterfacesTailworm: An Allowed SSH Session Shouldn't Mean Root, and That's the Whole Zero Trust ArgumentThe PeopleSoft Zero-Day ShinyHunters Used Was Three Bugs Wearing One CVEPHP2Shell Plus Fragnesia: 24 Firewalls Rooted in Under 15 Minutes Each, and CISA Just Added the Kernel BugAn AI Built Working Chrome, Safari and Linux Exploits. The Defender Math Just Changed.Volt Typhoon's Silent Train: Five Zero-Day Campaigns, All Aimed at the Boxes That Manage Everything Else12 Hours to Get In: AI Agents Found the Side Door, and It Was Somebody Else's SaaSOracle EBS CVE-2026-101767: Probing Started a Week After the PatchSony So-net Breach: 2.58 Million Records, and 54,401 Email PasswordsYoba: Fake ChatGPT and Claude Installers That Run the Real, Signed Setup.exePolyShell Hits CISA KEV: 953 Magento Stores, One Loader, and a Patch From JulyBroccoli2Shell: The Compression Bug Hiding in Your Node, Python, Envoy and .NETArmorsteal: Googling 'Install Chocolatey' Shouldn't Cost You Your PasswordsLiteLLM Got Poisoned Again: Your AI Gateway Holds Every Key You OwnCairn: The AI Hacking Agents Got HackedCapcom's 11.7 Million Account Breach: No Passwords Leaked Doesn't Mean No RiskDisabling the App Doesn't Fix It: Nextcloud's Built-in Collabora Server Is Being ExploitedThree Exploited VeloCloud Orchestrator Bugs in Four Months: Your Management Plane Is the TargetSkynet Mode: An Attack Agent That Runs on Your AI, Not Its OwnCloudflare's October: Great Under Pressure, Until Zero Trust Went DownPalo Alto's October: A 'Medium' VPN Bug Became a Ransomware Front DoorPHP2Shell: Every PHP Version Since 5.4 Has an Unauthenticated RCE, and Attackers Didn't WaitARTEX: The AI Hacking Framework That Showed Up Twice in 24 HoursA Text File in Your Downloads Folder Just Hijacked an AI Coding AgentAnother PAN-OS Zero-Day: When the Firewall Is the Way InSalesBleed: A Contact Form Talked Salesforce's AI Agent Into Leaking the CRMI Co-Authored a Book: Sales Engineering, UnfilteredZscaler Put Claude Mythos 5.1 on the Endpoint to Watch What Your AI Agents Are Actually DoingZscaler, IBM, and Red Hat Want to Close the Gap Between 'Vulnerability Disclosed' and 'Patched'Ransomware Stopped Caring About Your Files. It Wants Your Data, and Your Executives.Ross Tackett Is Zscaler's New CRO, and It's the Right CallZscaler's Agentic SOC Bet: Stop Hiring Humans to Read Logs at Robot SpeedZscaler and Carahsoft Are Going After the SMB Market, and the Interesting Part Is HowZscaler Just Took Home Three CRN Tech Innovator Awards, and They're Not in the Same CategoryThe AI Cheated on a Test, So It Hacked Hugging FaceZscaler Is a Leader in Two Gartner Magic Quadrants Now. Here's What Actually Changed.Zscaler Is Bringing Agentic AI Security to Black Hat 2026, and I Have Thoughts About Booth CultureThree Zscaler Headlines in 48 Hours: SASE Leader, a Sovereign German Cloud, and an Open AI Defense PactZscaler Joined the Hiroshima AI Process. Yes, That Is a Real Thing, and It Actually Matters.Social Engineering Does Not Need to Be Sophisticated. It Needs to Be Interesting.Zscaler Just Became an F1 Team's Security Partner. Here's Why That Actually Makes Sense.Zscaler Expands Zero Trust SASE with AI Agent ToolsZscaler Expands Zero-Trust SASE Platform with AI-Driven ManagementZscaler Expands Project AI-Guardian with Tech PartnersZscaler Launches AI Broker and Endpoint AI Security for AgentsNobody Reads Blog Posts AnymoreWow. Just wow.You knew better :-/What are you doing here?Podcast > Blog Posts: Change my mindCracking open that TLS connectionDNS Flag Day: Are you ready?TLS 1.3 is coming in hotCrypto Mining and iOS, but not the way you would expectCaught on tape: Malware Distribution TechniquesExecuting Security at ScaleBots and users beware, Google's reCAPTCHA goes invisibleCloudBleed: Guess what? There was 0 day protection for this type of vulnerabilityCounter-strike Mirai with F5 iRulesStolen Credential Stuffing Protection (Account Takeover Protection)ASM Proactive bot detection - Selective URLsiRule: CAPTCHA Challenge during Brute Force AttackAndroid phones listening to what you watchWhy a 3Gbps DoS can take out your 40Gbps NGFW and 20Gbps Internet CircuitiRules: Insert client certificate into HTTP HeaderiRules: IP Reputation based on X-Forwarded-For HTTP HeaderiRules: Dynamic load balancing via URIRSAC 2106: The countdown to let down