top of page
Security Tips
Checking the Nets: 511 Blocked Threats and the $0 Security Philosophy
Every morning, I do what Judge Dredd calls "checking the nets." Not network cables—network security. It's Monday, November 10, 2025, and before we do anything e
Patrick Duggan
Nov 10, 20258 min read
Azure Defender: Fear as a Feature, Spend as a Signal
Azure Defender: Fear as a Feature, Spend as a Signal
Patrick Duggan
Oct 14, 20252 min read
Why Azure Container Apps Suck (For Anything That Matters)
Why Azure Container Apps Suck (For Anything That Matters)
Patrick Duggan
Oct 5, 20253 min read
“Give Me a Tuba and I’ll Get You a Tune Out of It”: Lennon’s Legend and Lightning-Fast AI CI/CD
“Give Me a Tuba and I’ll Get You a Tune Out of It”: Lennon’s Legend and Lightning-Fast AI CI/CD
Patrick Duggan
Sep 29, 20252 min read
OAuth’s Trojan Horse: When Drift Became the Attack Vector
OAuth’s Trojan Horse: When Drift Became the Attack Vector
Patrick Duggan
Sep 17, 20252 min read
unc6395: The Breach the Keeps On Breaching!
unc6395: The Breach the Keeps On Breaching!
Patrick Duggan
Sep 16, 20253 min read
The Legacy That Won’t Die: How Microsoft’s Love Affair with SMBv1 Keeps the Enterprise Vulnerable
The Legacy That Won’t Die: How Microsoft’s Love Affair with SMBv1 Keeps the Enterprise Vulnerable
Patrick Duggan
Sep 15, 20253 min read
Think the Salesforce Drift event is just gonna blow over? Look again
Think the Salesforce Drift event is just gonna blow over? Look again
Patrick Duggan
Sep 7, 20251 min read
ClaudeAI Didn’t Hack You — But He Made It Easier (and cheaper)
ClaudeAI Didn’t Hack You — But He Made It Easier (and cheaper)
Patrick Duggan
Sep 5, 20253 min read
The Botnet Beneath Your Toaster: How Shodan Reveals the IoT Security Crisis
How does Claude and the Botnets find targets? They look!
Patrick Duggan
Sep 5, 20253 min read
OAuth’s Blind Spot: Lessons from the Salesloft Drift Compromise
OAuth’s Blind Spot: Lessons from the Salesloft Drift Compromise
Patrick Duggan
Sep 2, 20252 min read
Cloud Espionage in the Crosshairs: How Murky Panda Is Weaponizing Entra ID Trust
Cloud Espionage in the Crosshairs: How Murky Panda Is Weaponizing Entra ID Trust
Patrick Duggan
Aug 29, 20252 min read
“McDonald's, I came here to chew bubblegum and secure your pipeline… and I’m all outta bubblegum.”
“McDonald's, I came here to chew bubblegum and secure your pipeline… and I’m all outta bubblegum.”
Patrick Duggan
Aug 28, 20252 min read
How to Review OAuth in Atlassian Products Without Losing Your Sanity
How to Review OAuth in Atlassian Products Without Losing Your Sanity
Patrick Duggan
Aug 27, 20252 min read
Shrink the Blast Radius, Baby: Salesforce Permissions for Demon-Free Admins
Shrink the Blast Radius, Baby: Salesforce Permissions for Demon-Free Admins
Patrick Duggan
Aug 20, 20252 min read
Conan the Barbarian shares real life tips for Salesforce Security!
Conan the Barbarian shares real life tips for Salesforce Security!
Patrick Duggan
Aug 19, 20252 min read
bottom of page