George B.

Nov 10, 2026

5 days in a row on the Cyberr daily challenge.

Today at senior level: detection engineering, threat intelligence and application security.

Can you beat 2/3 on Detection engineering?

https://cyberr.ai/daily/23f4a3ec-c412-4cdd-806a-2952ba2286f0

View post

Nov 9, 2026

Git blame is going to be a very uncomfortable conversation with myself

https://thehackernews.com/2026/11/claude-codes-dont-ask-again-file.html

View post

Nov 9, 2026

Q2: Your company's e-commerce platform stores customer PII in a third-party cloud service. A peer retailer just disclosed that unauthorized access to its third-party cloud service may have exposed 7.7 million customers' data. As security lead, what should you prioritise first?

===

We should prioritise vendors handling sensitive PII, review access logs for suspicious activity, and rotate credentials where exposure is suspected.

View post

Nov 4, 2026

Someone remotely defrosting supermarket fridges overnight. An S3 bucket exposing customer data.

Try today's set.

https://cyberr.ai/daily/a477f0fa-864e-47dd-8871-01bbc259e3f2

View post

Oct 31, 2026

The Savannah disclosure is a good case for reviewing where validated data gets reused: an RFC-valid email address became shell syntax in a GPG helper, opening a path to Bash maintainer impersonation. I’d bring this into code review as a question about which interpreter receives a value next—“already validated” tells you very little without that context.

https://www.hacktron.ai/blog/hacking-gnu-savannah

View post