Posts
All the articles I've posted.
-
Four Days, 22 Emails, and One Very Patient AI Persona
I built an autonomous AI scambaiting persona and pointed her at a fake government grant scammer. Four days later he rage-quit and called her an Olofo.
-
Instructure Paid. Now What? The Case For and Against the Canvas Ransom Deal.
Instructure reached an agreement with ShinyHunters hours before the May 12 deadline. The ransom debate is old but this case adds new wrinkles worth working through.
-
The Canvas Breach and What It Tells Us About Vendor Risk in Education
ShinyHunters breached Instructure and compromised data from thousands of institutions. The technical details matter less than what this breach pattern keeps telling us about third-party risk.
-
The Midnight Beachhead: A Real-World RCE Incident on a University Network
Shortly after midnight, an attacker exploited a known vulnerability in a web-facing server at one of our international campus locations. This is what happened next.