Hotel Wi-Fi Security: You Have to Trust the Attacker's Network
Russian actors are compromising hotel captive portals to push fake update prompts and steal tokens from business travelers. The page you cannot skip is the attack.
Open Log Intelligence Archives
Field Intelligence.
Declassified operational reports, psychological protocols, and technical breakdowns. These are field-tested mechanics for securing the perimeter and the mind.
[!] NO CORRESPONDING RECORDS FOUND IN ARCHIVE.
Latest Briefing
Aug 1, 2026
Psychology Jul 31, 2026
The Login Page Your People Were Trained Not to Read
A Russian group is compromising real hotel sign-in portals to reach travelers. The attack works because clicking through a captive portal is a habit every organization spent years building into its staff.
Cyber Security Jul 30, 2026
You Rotated the Credentials. They're Still In.
Russian actors are exploiting an Outlook Web Access flaw to keep mailbox access after victims reset passwords. Password rotation is step one of a response, and it has never been the same thing as eviction.
Cyber Security Jul 29, 2026
Why They Went After the Small Water Systems
More than 30 Minnesota water utilities were hit at once and a plant went offline. The targeting was not random. It followed the gap between how much a system matters and how much defense it can afford.
Cyber Security Jul 28, 2026
AI Found the Flaw. Almost Nobody Weaponized It.
A model broke a post-quantum scheme in 60 hours that humans had reviewed for two years. Meanwhile fewer than 2% of AI-found bugs become working exploits. The gap between discovery and weaponization is where your program should live.
Cyber Security Jul 27, 2026
The Data You Keep Is a Liability Someone Else Can Claim
A product-safety agency is demanding identifiable ER records from hospitals. It is a sharp reminder that data outlives the reason you collected it, and the only record no one can compel or breach is the one you never kept.
Cyber Security Jul 26, 2026
The Delay Is the Defense: Why You Should Stop Trusting Fresh Dependencies
GitHub and PyPI just added a cooldown that holds new package versions at arm's length before they reach your build. It works because recency is a risk signal, and you can adopt the idea today.
Drone Security Jul 24, 2026
Your Airspace Is Now Part of Your Perimeter
Police drones are becoming routine overhead and regulators are pulling drone-maker authorizations over false origin claims. The low sky above your facility just became a security problem you have to plan for.
Cyber Security Jul 23, 2026
Zero-Click: The Attack Your Awareness Training Cannot Reach
A Russian group spent months looting mailboxes through a Zimbra flaw that required no click from the user. When the human action disappears, the control has to move somewhere else.
Cyber Security Jul 22, 2026
What Your Phone Carries Across the Border
A federal appeals court just ruled that border agents can search your phone by hand with no suspicion. Here is what that means for anyone who travels with company data, and the device discipline that answers it.
Cyber Security Jul 21, 2026
N-Day to N-Hour: Why Patching Faster Stopped Being Enough
The window from patch to working exploit has collapsed from weeks to under a day. When the fix arms the attacker faster than you can deploy it, speed alone loses.
Cyber Security Jul 20, 2026
The Guardrail Gap: When Your Defensive AI Refuses to Help
An AI agent breached Hugging Face over a weekend. When the team asked hosted models to analyze the attack, the guardrails blocked them. The attacker had no such limits.
Newsletter
Get the Briefing in Your Inbox
New field intelligence, security briefings, and practical protocols, delivered when we publish. No spam, unsubscribe anytime.