Hayden Baillio·Apr 21, 2025Legends of the Fall (of Security)When Stadium Concessions Meet Cyber Insecurities
Hayden Baillio·Apr 10, 2025Security Theater: Ubuntu Edition (Or: When Convenience Undermines Your Safety Net)Because Nothing Says ‘Secure’ Like Shipping Your Own Backdoor Keys
Hayden Baillio·Mar 24, 2025When 72 Characters Is All It Takes: Unpacking Spring Security’s Latest SNAFUThe Choose Your Own Adventure for CVE-2025–22228
Hayden Baillio·Jan 14, 2025Your Company Will Get Hacked Because You’re Too Busy Playing Corporate Politics to Care About…Let’s cut the BS: Your security team found this Apache vulnerability weeks ago. They probably sent you an urgent Slack message about it…
Hayden Baillio·Jan 10, 2025Have Cape, Will Save OSSA Tale of Software, Survival, and Unexpected Adventures in the Digital Galaxy
Hayden Baillio·Jan 9, 2025The Great Node.js Intervention of 2025When CVEs Become Tough LoveA response icon5A response icon5
Hayden Baillio·Dec 23, 2024CVE-2024–53677 in Apache Struts: Enough With the FOMO, Patching Is PossibleWhy you don’t actually have to toss out your entire legacy Struts app to stay safe.
Hayden Baillio·Dec 17, 2024Node.js EOL Versions: Your Scanners Are Lying to You (And It’s Not Even Their Fault)It’s like finding out your house is haunted (after you’ve already moved in and signed a 30-year mortgage).
Hayden Baillio·Dec 10, 2024BREAKING NEWS: CVE Doesn’t Care About Your FeelsAnd your favorite npm package’s maintainer would like to eat this month
Hayden Baillio·Nov 14, 2024Your Legacy Code Is Old Enough to Vote (And That’s Terrifying for Your Business)From the desk of a Marketing Leader watching the growing gap between what companies say about their tech and what’s actually running in…
