Computers

Black swan

How I spent a weekend reinventing a 50-cent chip

An optocoupler is a part I’d seen in schematics for a while and quietly skipped over. There’s an LED pointed at a photo-sensitive transistor with a dashed line between them. The dashed line is the entire point: the two halves of the part are not electrically connected. The signal crosses as light, over a few hundred microns […]

Read More
SAIL-2025

Solving the Openfire Lab Blue team challenge

As a cybersecurity analyst, you are tasked with investigating a data breach targeting your organization’s Openfire messaging server.
Attackers have exploited a vulnerability in the server, compromising sensitive communications and potentially exposing critical data.

Read More
ShadowCitadel cover

Solving the ShadowCitadel Lab Blue team challenge 🫆

Today, we dive into a host-based forensics investigation − a curious case of a breach inside the enterprise environment of a company called TechSynergy.
They have detected an anomaly after an employee engaged with an unexpected email attachment. This triggered a series of covert operations within the network, including unusual account activity and system alterations.

Read More
Sophisticado

How to prevent token misuse in LLM integrations

LLMs are powerful. And expensive. Every token counts, and if you’re building something that uses an LLM API (Claude, OpenAI, Gemini or PaLM, Mistral, etc.), malicious users can abuse it to burn through your credits. This is especially true for apps that take user input and feed it to the model. The trick is that […]

Read More
Bars in Dublin at dusk

Solving the XLMRat Blue team challenge

Today we’re looking at the XLMRat malware. It is a remote access trojan (hence the RAT part) built to be small, sneaky, and stupidly persistent. It typically rides in via phishing or social engineering, often disguised as something mundane, like a JPG or TXT file. It targets Windows systems and speaks fluent PowerShell. It’s popular […]

Read More
Notebook

Billion-dollar brains: the real cost of AI

AI-assisted coding feels like magic. You type what you want, and out comes working code. (well, maybe after a few hours of setup − but still) Like all magic, though, it has a cost. And right now, that cost is mostly hidden − even as the invoices show up every month. What makes it work […]

Read More