Blog
Field notes on OSINT, security checks, SEO, and safer hiring and vendor due diligence.
-
When AI Support Becomes an Account-Takeover Surface
2026-07-24
Krebs’ report points to a broader security pattern: AI-assisted support flows are becoming part of the authentication perimeter. These field notes focus on where account-recovery automation breaks, what signals to inspect, and how to verify that support tooling cannot silently rewrite an account’s roots of trust.
-
What a Record Patch Tuesday Really Signals
2026-07-23
Krebs reports a record-sized June 2026 Patch Tuesday, but the practitioner question is not the count. It is where WebDAV, SMB, and long-lived exceptions create the shortest path from a bulletin to real exposure in your environment.
-
What LG’s TV app proxy ban signals to investigators
2026-07-22
Krebs’ report about LG banning residential proxies in smart TV apps is a useful signal for defenders: TVs have become low-visibility network endpoints with app supply chains and opaque outbound traffic. These field notes focus on what to inspect, how to verify it, and where investigators usually misread the signals.
-
Reading ransomware signals beyond the group name
2026-07-21
A Krebs report on “The Gentlemen” is a good prompt to revisit how ransomware operators actually leave traceable signals. The useful work is in reading contact paths, infrastructure churn, negotiation habits, and admin mistakes without overstating what any single clue proves.
-
What to inspect when botnet infrastructure overlaps a company
2026-07-20
A Krebs report linking the Popa botnet to a public company is a reminder that the real work is in the infrastructure graph. These field notes focus on the signals worth testing, from DNS and certificates to control surfaces and timeline persistence.
-
How to vet an offensive security startup when the story shifts
2026-07-19
A troubling headline is only the start. For security buyers, the real work is checking whether a high-trust vendor’s identity, infrastructure, claims, and operating process line up under ordinary scrutiny.
-
What CISA’s GitHub Leak Should Make Defenders Inspect
2026-07-18
A public GitHub leak is rarely just about one exposed secret. The useful investigation is around token scope, CI trust paths, logs, and the quiet defaults that turn a commit mistake into broader risk.
-
Welcome to the pigfox blog
2026-07-17
Field notes on OSINT techniques, verification workflows, and due-diligence tooling.