[go: up one dir, main page]

the bytefield notes

the byte

A plain security blog about real systems, stale risk, operational discipline, and what actually matters when the internet gets loud.

Latest posts

Your attack surface is not a spreadsheet

Jun 3, 2026. Attack surface management.

The systems that hurt you are often the ones everyone thought someone else owned. Inventory is not bureaucracy. It is how you stop being surprised by your own network.

The newest KEV entry is an old WebLogic lesson

Jun 3, 2026. Vulnerability management.

CISA added CVE 2024 21182 to the Known Exploited Vulnerabilities catalog on June 1. The lesson is simple. Attackers do not care whether a bug feels new. They care whether it is reachable, trusted, and forgotten.

What this is

These are byte sized blogs designed for the c00ls.