Schomer — Principal Security Solutions Architect & Founder
The Architectural Manifesto: Part 2 — Why "Black October" Proves Your Threat Model is Dead. The global cybersecurity ecosystem is scrambling over the new PHP "php2shell" zero-days (CVE-2026-109618 & CVE-2026-109619). CISA is yelling to patch, tech stacks are forcing emergency of…
What happens when the internet-facing part of your business becomes the target of a traffic tsunami? DDoS attacks are becoming increasingly difficult to ignore. Cloudflare reported a 519% increase in hyper-volumetric DDoS attacks during the first half of 2026, with attacks incre…
The cloud didn't eliminate the perimeter. It moved the perimeter into identity. This is one of the biggest shifts in modern cybersecurity. Your infrastructure may be protected by: Firewalls. WAFs. EDR. Network segmentation. DDoS protection. But if an attacker obtains a highly pr…
You may have written 99% of your application code—and still be trusting thousands of lines you didn't write. That's the uncomfortable reality of modern software development. A typical application depends on: → npm packages → Python packages → Docker images → GitHub Actions → Clo…
Completed: Guided Pentest: Infrastructure | TryHackMe I've completed the Guided Pentest: Infrastructure room on TryHackMe, where I practised the main stages of an infrastructure penetration test, from enumeration to privilege escalation. What I worked on -Nmap: Scanned the targe…
You can secure your company perfectly—and still be compromised through someone you trusted. That's the uncomfortable reality of modern supply-chain attacks. Your organization may have: MFA. EDR. Firewalls. SIEM. Strong passwords. Security policies. But what happens when a truste…
Schomer — Principal Security Solutions Architect & Founder
AI found the bug. Humans took the blame. Meanwhile, the internet went dark. The current global PHP crisis (php2shell) forced entire government and healthcare networks in Europe to literally pull the plug and go offline. Why? Because an AI discovered a remote code execution (RCE)…
Schomer — Principal Security Solutions Architect & Founder
Inside the ETBV Engine State Machine: Eliminating Vulnerability Classes in <0.15ms If you want to survive sub-minute weaponization windows, your defenses must be completely deterministic. Here is exactly how the Execution-Time Boundary Verification (ETBV) engine processes, handl…
Let's assume a hardening chain of thought. Suppose that you got hired to harden a business that appeals to two distinct types of clients: public and private. Public clients' concerns include GDPR and PII protection, while private clients' concerns include legal disclosures, conf…
Hello everyone! I'm Rylan Dansereau, a recent cybersecurity graduate from Florida International University, based in Miami, Florida. I'm currently seeking entry-level opportunities in cybersecurity, particularly in security operations, threat intelligence, network security, and…
Schomer — Principal Security Solutions Architect & Founder
Moving Validation Before Allocation: Securing Agentic Commerce at Layer Zero As automated transaction networks and autonomous AI agents take over global checkout paths, application security interfaces are facing a catastrophic engineering gap: traditional Web Application Firewal…
Schomer — Principal Security Solutions Architect & Founder
Look at the sheer velocity of this week's tactical threat snapshot. BeyondTrust, Ivanti, Cisco, and Palo Alto Networks all had critical edge vulnerabilities weaponized in the wild. Take a close look at the mechanics behind the BeyondTrust exploit (CVE-2026-102764). It’s a 9.3 CV…
HOTEL NETWORK SEGMENTATION: SEPARATE SSIDs DO NOT GUARANTEE ISOLATION A hotel may expose multiple network zones through the same physical infrastructure: - Guest wireless - Staff endpoints - PMS and operational services - POS and payment infrastructure - CCTV and access control…
https://youtu.be/nBDgaOc-8MY Want to start your cybersecurity journey but aren't sure where to begin? Information Security Tutorials offers educational content designed to help you build a strong foundation in cybersecurity and develop practical skills step by step. 📚 Explore o…
The attacker doesn't have to be smarter than your security team. They just need to be quieter. Most organizations invest heavily in prevention. Firewalls. EDR. MFA. SIEM. WAF. IDS/IPS. And rightly so. But security controls don't eliminate risk. They create signals. The real ques…
Your firewall can be working perfectly while an attacker is already inside. That sounds contradictory. It isn't. Modern attacks don't always look like attacks. A compromised employee account can authenticate normally. A stolen session token can bypass the login process entirely.…
Marco Iacovitti — Chief Innovation Officer & Chief Information Security Officer
What cybersecurity IS? It's not attributable only to “security of IT” Cybersecurity is a "coordinated system" of layers that could be, rateher, are surely imperfect but absolutely complementary each other. Each layar has it's hole (passages) like a slice of "Swiss Chees". The su…
Schomer — Principal Security Solutions Architect & Founder
The Last 24 Hours Proved It: Your Patch Management Strategy is Broken 🛑 Look at the threat intelligence feed from just the last day. It’s a total structural failure across the entire software stack: • Edge Infrastructure: Palo Alto PAN-OS (CVE-2026-0322) under active RCE exploi…
Schomer — Principal Security Solutions Architect & Founder
🔒 HACKERS DON'T BREAK IN; THEY LOG IN. WHY IDENTITY SECRETS ARE AN ARCHITECTURAL TRAP. The industry is learning a painful lesson: traditional IAM and network segmentation are completely helpless against an attacker holding valid, compromised credentials. When a rogue actor uses…
HOTEL SECURITY SYSTEMS: THE CONVERGENCE OF PHYSICAL ACCESS AND CYBER RISK Electronic locks, CCTV, access-control platforms and connected facility systems can introduce security dependencies beyond the physical device itself. An assessment should examine: - Asset inventory and fi…
Schomer — Principal Security Solutions Architect & Founder
The reason our framework handles edge infrastructure variance natively where standard automation drops the ball is simple: we validate the execution boundary at Layer Zero, pre-authentication. Look at what happened this month with Cisco and NetScaler—major enterprises burned tho…