Field notes
Incidents worth
reading twice.
Write-ups of public incidents, chosen because the lesson generalises past the company it happened to — what actually failed, and how we would have approached the fix. No vendor pitch, no disclosure we were not party to.
- 17 Oct 2026Browsers were patched in hours. Your CI runner was patched when someone rebuilt the image.Eight intermediate CA private keys were recovered in under 30 milliseconds. The browsers were fixed the same day; the clients your pipeline actually runs were not.
- 09 Oct 2026The device’s own authenticity check passed. The implant was behind it.A recovery phrase was captured on screen during setup and carried out over an embedded eSIM — across a network the owner never touched.