The Link Between Your Workplace Situation and Your Mental Health
One thing I keep forgetting and relearning is how important it is to us that people appreciate our work. The following thing has happened multiple…
Category: Mix
When fear no longer holds you back. Interview with Ryan Bonner (Roll4CombatUS)
Ryan Bonner, also known as Roll4CombatUS, is a respected Bug Bounty hunter, consultant, speaker, and Intigriti Hacker Ambassador based in the United States. In today’s…
I Only Do Anything Once
I was walking someone through my setup this morning and caught myself saying the same thing over and over, so I might as well write…
Using Genius AI Models for Important Things: Cheating at NetHack · Joseph Thacker
This is how I used GPT-5.6 Daybreak Blue to find a buffer overflow, crash the game in order to dupe items, and get the high…
![[tl;dr sec] #342 - Figma's Agentic Detection, Agent Identity, Uber's Agent-(E)DR](https://image.cybernoz.com/wp-content/uploads/2026/08/tldr-sec-342-Figmas-Agentic-Detection-Agent-Identity-Ubers-600x340.png)
[tl;dr sec] #342 – Figma’s Agentic Detection, Agent Identity, Uber’s Agent-(E)DR
The Mandalorian I don’t have much time to watch TV or movies these days, but I watched The Mandalorian movie over the weekend and it…
Shadow IT Security and why visibility beats another approval process
A staging site is meant to last a week, but six months later, it still resolves on a company subdomain, runs an old framework, and…
I’m Worried About a Prompt Injection Worm
I think one form the first big AI hack could take is a prompt injection worm. Let’s piece this together. Open source models reach or…
Unconventional Thought Is the Differentiator
I think one of the most important ideas right now to think about is that unconventional thought is becoming way more of a differentiator and…
Fix Execution, Not the SOP
AI is multiplying the problem of us having far too many inputs. I’m becoming viscerally aware of the fact that I already know what to…
How AI Builders Will Get Hacked
If you are building stuff with AI I have a critical security recommendation for you. Create a continuously-running security testing system that: Maintains a list…
How to Get Started in Cybersecurity 2026
I’ve been writing versions of this guide since 2008. The most recent big one was the 2019 update, which covers the full tactical ladder—education, building…
Stolen Authority
We need to label this parasitic marketing technique with an adequately strong term. Stolen Authority. (From stolen Valor) It’s the deplorable tactic of doing an…