Blog
Notes on technology, building, and whatever I'm learning.
Latest
Aug 16, 2026
Cloud roundup: macOS Screen Sharing bug now under attack
A patched macOS Screen Sharing flaw is being exploited to plant crypto miners, a Windows Defender bypass has no fix yet, and EC2 gets built-in app health checks.
Aug 16, 2026
Cutting NAT gateway costs with VPC endpoints that actually help
How gateway and interface VPC endpoints replace NAT gateway traffic for AWS API calls, what they cost instead, and which traffic still has to go through NAT.
Aug 14, 2026
Cloud roundup: S3 finally names the policy that denied you
AWS S3 access-denied errors now name the exact policy ARN, Client VPN gets a scriptable CLI, and OpenAI ships authorized offensive-security models on Bedrock.
All posts
40 posts
Aug 14, 2026
Service spotlight: Amazon Cognito user pools vs identity pools
Amazon Cognito is two different services wearing one name — user pools for authentication, identity pools for AWS credentials — and the pricing tiers that trip teams up.
Aug 14, 2026
The Capital One breach: an SSRF bug into 100M records
A misconfigured WAF and an SSRF bug let an attacker reach the AWS metadata service and steal role credentials — exposing 100M+ Capital One records.
Aug 13, 2026
Cloud roundup: 153GB LiteLLM breach exposes cloud secrets
A leaked 153GB credential archive ties March's LiteLLM breach to 2,488 orgs including AWS and Cisco, plus new EKS control-plane and OpenSearch pricing changes.
Aug 12, 2026
Cloud roundup: Metabase CVSS 10 SQLi confirmed exploited
A CVSS 10 Metabase SQLi is now confirmed exploited and in CISA KEV, plus an exploited Cisco ASA/FTD DoS bug and Microsoft's Patch Tuesday zero-day.
Aug 11, 2026
Cloud roundup: New ransomware exploits N-central bug
Microsoft ties new StormEncryptor ransomware to an N-able N-central auth bypass, plus new AWS EC2 health checks and DRS UEFI support for Linux failovers.
Aug 10, 2026
Cloud roundup: LoadMaster RCE hits its KEV deadline today
A critical unauthenticated Progress LoadMaster RCE hits its federal KEV remediation deadline today, plus a CVSS 10 Metabase zero-day and AWS supply chain security news.
Aug 10, 2026
CI/CD for a static site: build, sync, and invalidate
How to structure a GitHub Actions pipeline that builds a static site, syncs it to S3 with correct cache headers, and invalidates CloudFront without overpaying.
Aug 10, 2026
CloudFront invalidations without nuking your AWS bill
How CloudFront invalidation pricing actually works, why fingerprinted asset filenames let you skip it almost entirely, and when surgical invalidation is still required.
Aug 10, 2026
Ditch IAM access keys: GitHub Actions OIDC to AWS
A step-by-step guide to replacing long-lived IAM access keys in GitHub Actions with short-lived OIDC credentials, including the trust policy gotchas that bite people.