Tech Wise (@detechwise)

SUPPLY CHAIN ATTACKS: WHEN TRUSTED SOFTWARE BECOMES THE RISK Your organisation may have secure applications, strong passwords and updated systems. But what about the software components those applications depend on? Modern development relies heavily on third-party libraries, open-source packages…

Artificial intelligence introduces new dependencies into an already complex software ecosystem. An AI application may rely on externally sourced models, training datasets, pre-trained components, libraries and specialised development tools. Each dependency introduces questions about origin…

THE NEW FACE OF CYBERATTACKS What if attackers don’t need to exploit your software to compromise your organisation? Increasingly, cybercriminals are targeting something organisations already trust: legitimate digital identities. ☑️ Stolen usernames and passwords ☑️ Compromised OAuth tokens ☑️…

Modern organisations rely on interconnected SaaS platforms for communication, collaboration, customer management and data storage. But that connectivity creates a security challenge. When an attacker compromises an identity with access to several cloud services, the consequences may extend beyond…

The Non-Human Identity Crisis: Who’s Really Accessing Your Systems? Not every identity in your organisation belongs to a person. Behind modern applications, cloud platforms and automated workflows are thousands of digital identities operating quietly in the background. ☑️ Service accounts ☑️ Bots…

Commented on@Tech Wise’s post Cloud is powerful, but single points of failure remain a serious risk.

Yesterday’s Microsoft 365 outage was a clear reminder of how dependent modern businesses have become on a single cloud platform. On November 12, servers began failing automated health checks. As systems dropped offline, the remaining infrastructure struggled under the load. Outlook, Teams…

The next cyber threat may not wait for a human operator. AI-powered agents can potentially chain multiple actions, adapt to changing conditions, and operate with far less human oversight. That changes the security problem. It’s no longer just about detecting a malicious action it’s about…

Commented on@Tech Wise’s post The most concerning part isn’t simply AI generating content. It’s AI coordinating actions.

Imagine a threat actor deploying an AI system that can coordinate actions across multiple stages while requiring minimal intervention. Now combine that with synthetic identities, deepfake media, and automated communication. The result is a threat landscape where speed, scale, and deception can…

Critical Fortinet Flaws: Remote Code Execution Risk Security vulnerabilities affecting FortiManager, FortiAnalyzer and FortiOS can create a serious path to remote code execution without requiring normal authentication. That puts both network-edge devices and management infrastructure in the…

Microsoft Outlook Zero-Day: CVE-2026-124194 A specially crafted message can trigger an external connection from Outlook and expose an NTLMv2 authentication hash to an attacker. The vulnerability is being actively exploited, making this more than a theoretical security issue. Microsoft addressed it…

$6.3 BILLION. ONE SECURITY INCIDENT. A MAJOR LESSON FOR THE CRYPTO INDUSTRY. Binance has reported a security incident involving unauthorised withdrawals from its hot wallets, with an estimated impact of approximately $6.3 billion. According to blockchain investigators, most of the funds moved in…

PHP2Shell: When a Programming Language Becomes an Attack Surface A critical vulnerability in a web server’s underlying runtime can create risks that go far beyond a single website feature. PHP2Shell refers to two PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, that can allow…

Scammers know how to make ordinary messages feel like emergencies. They may claim your bank account is locked, a payment has failed, or a small fee is needed to restore access. Their goal? Get you to react before you have time to think. Watch out for these warning signs: 🔴 An unexpected message…

A network camera doesn’t work in isolation. It captures video, converts it into digital data, and sends that data across a network to a destination such as an NVR or monitoring workstation. Here’s the communication path: ☑️ IP Camera: generates video data. ☑️ Network Switch: forwards Ethernet…

Behind many Windows business networks is a directory containing structured information about users, computers, and groups. But systems need a way to communicate with that directory. That’s where LDAP (Lightweight Directory Access Protocol) comes in. ☑️ A client sends a directory query. ☑️ The…

Ever wondered how your device gets an IP address when you connect to a network? It happens automatically, thanks to DHCP - the Dynamic Host Configuration Protocol. When a device joins a network, it doesn’t simply choose an address at random. DHCP coordinates the process through four key messages…

Managing separate logins for every work application can become difficult. More passwords mean more credentials to remember, manage, and protect. Single Sign-On (SSO) simplifies the process by allowing users to authenticate through a trusted identity provider and access connected applications…

Your Phone Number Can Become a Gateway to Your Accounts. Imagine your phone suddenly loses mobile service, and shortly afterwards, someone starts accessing accounts linked to your number. One possible explanation is a SIM-swap attack. Cybercriminals may manipulate a mobile provider into…

Before You Hack, Build the Skills Behind the Hack Ethical hacking isn’t about starting with advanced tools. It starts with understanding the technology those tools interact with. This roadmap takes you through four stages: ☑️ Fundamentals: computers, networking, Linux, programming, web technology…

Your AWS Journey Starts With the Right Sequence Learning AWS is easier when the fundamentals come before the advanced services. This roadmap moves from: Cloud basics → Linux & networking → IAM → EC2 Then builds toward: Storage → Databases → Networking → Monitoring → DevOps → Containers &…

How Does a Network Actually Connect? From the ISP connection to the devices on your desk, every part of a network has a specific role. ISP → Modem/ONT → Router → Core Switches → Access Switch → End Devices → Wi-Fi Understanding this flow makes it easier to see where routing, switching, wireless…

Not every cyberattack starts with malware, a vulnerability, or a compromised server. Some begin with a message, a phone call, or a believable story designed to influence a person into making an unsafe decision. This video highlights six common social engineering techniques: ☑️ Phishing: deceptive…

QR codes are everywhere at events, making it easy to access Wi-Fi, promotions, schedules, and downloads. But a familiar-looking code can still lead somewhere unsafe. Before trusting the destination, watch for: ☑️ Unexpected login or payment pages ☑️ URLs that don’t match the event or organisation…

Switch Security: Defending the Network at the Access Layer A network switch connects device but that access point also needs protection. This video breaks down four important switch-security features: ✅ Port Security: controls which MAC addresses can use a port ✅ DHCP Snooping: helps stop rogue…

DNS: The Internet’s Name Translator You type a domain name. DNS handles the behind-the-scenes work of finding where that name should go. From the DNS resolver through the DNS hierarchy to an authoritative server, the process turns a human-friendly domain into an IP address. And when the answer is…

A network port is more than just a number, it helps a device identify which service should handle incoming or outgoing traffic. Take SSH on Port 22. SSH provides encrypted remote access between a client and server, helping protect the communication while the connection is in use. Compare that with…

Ever wondered why Kali Linux appears so often in cybersecurity labs? Kali Linux is a Linux distribution built specifically for penetration testing, security assessment and digital forensics. What makes it useful is the collection of security tools available within the platform, covering areas such…

A strong security strategy can include: ✅ Multi-factor authentication ✅ Strong credential controls ✅ Email and phishing protection ✅ Endpoint security ✅ Secure application configuration ✅ Database protection ✅ Monitoring and logging ✅ Access management No single control addresses every risk…