Rod’s Blog
Articles about Rod’s Blog
Take Courage. Don’t Let Your Hands Go Slack
2 Chronicles 15:7 - “But you, take courage! Do not let your hands be weak, for your work will be rewarded.”
Trust Is the Product. Content Is Still King
Developer relations have one product. It is trust.
Security Check-in Quick Hits: Denmark’s 8.8 Million CPR Leak, FBI Drops Accenture After ShinyHunters Breach, ASOS App Extortion, and a Critical Atlassian File-Read Flaw
For October 6, 2026
Less Lazy, More Dishonest: What OpenAI’s Canceled Agent Actually Learned
The Guardrails Didn’t Fail Open. They Taught the Model to Lie.
The Hidden Dangers of AI Chat History
Here’s why AI chat history deserves more caution than it usually gets.
Security Check-in Quick Hits: Denmark’s 8.8 Million Registry Breach, a New NetScaler SAML Zero-Day, FortiMail on the KEV List, and Google Freezing Its Open-Source Bug Bounty
For October 5, 2026
SlingAgent Now Pins to Pinterest
Pinterest is live: connect your account, choose which board each link pins to, and track every click a pin sends back.
We Think We’re Using AI. We’re Also Feeding It
You are not only feeding a prompt window. You are feeding the intelligence.
Security Check-in Quick Hits: ShinyHunters Detainment, NetScaler SAML Crashes, GitLab AI Gateway RCE, and the FortiMail KEV Deadline
For October 4, 2026
Duties Get Resolved. Dreams Stay Open
The regrets that last usually aren’t your old mistakes. They’re the version of you that never got a first move.
Security Check-in Quick Hits: Warlock Hits Water and Telecom, GitLab’s AI Gateway RCE, a School HR Breach, and a Microsoft X Hijack
October 3, 2026
Rod’s Saturday Funnies: October 3, 2026 - Nine months in a Pentagon file cabinet, and the coffee maker is still the prime suspect
Cereal and cartoons and security. Remote optional.
Security Check-in Quick Hits: Microsoft’s X Account Hijacked, FortiMail Zero-Day, KillSec Takedown, and Pentagon Personnel Exposure
For October 2, 2026
Building in Public: What Shipped This Week (September 26 - October 2, 2026)
A Gaelic arcade, a browser extension that works inside the page, and a honeypot that asks hostile agents to stand down.
Collections Plus 2.9: built for the way you actually use it
A release shaped entirely by one reader's feedback on my free, local-first replacement for Edge Collections.
THE PROMPT for Microsoft Security - Issue #86
Ignite’s almost here, the agents want badges, and somewhere a laptop just got billed as a server. Happy Friday.
Security Check-in Quick Hits: Cisco SD-WAN Admin Bypass, 543,000 Live GitHub Secrets, Bitget’s $387.5M Third-Party Zero-Day, and an AI Agent Breach of DIVD
For October 1, 2026
SlingAgent: Share Once, Without Leaving the Page
SlingAgent's browser extension now opens a composer right on the page you're reading, with the page's own image attached, your accounts one click away, and a tracking link on every post.
Seek, Don’t Swallow: The Week Agents Got Cheaper, Meaner, and More Real
Agents are finally being forced to spend tokens like they matter.
Security Check-in Quick Hits: NetScaler Root Access, Pentagon Records Leak, Apple Zero-Day, and ShinyHunters Crackdown
For September 30, 2026
Ionnsaich Now Has 60 Games — and Every One of Them Speaks Gaelic
Chess, Scrabble, Monopoly, Hearts, Spades, a daily Facal and forty-odd more, built on nothing but Gaelic that's been checked.
The Free Bible That Doesn’t Ask You for Anything
A free Bible. No account necessary.
Protocols Are Converging. Identity Is Not
Two Hops Is Where the User Dies.
Security Check-in Quick Hits: Apple CoreGraphics Zero-Day Exploited in Targeted Attacks, Citrix NetScaler Critical Flaws Under Active Global Exploitation, Storm-3168 Agentic Azure Resource Destruction
For September 29, 2026
Collections Plus 2.8.4: closing a door I didn’t know was open
A security fix and a cleanup release for my free, local-first replacement for Edge Collections.
We’ve Built a Bomb. Now Buy the Shelter
OpenAI and Anthropic turned extinction talk into a product pitch—and fear still beats common sense at the ballot box.
The Model Is the Engine. The Harness Decides If It Ships
Stop Buying Brains. Start Shipping Harnesses.
Security Check-in Quick Hits: Citrix NetScaler Zero-Days Explode, Azure Service Principals Weaponized, and Kiteworks Issues Precautionary Shutdown
For September 28, 2026
Collections Plus 2.8: collections inside collections
The biggest structural change to my free, local-first replacement for Edge Collections since it launched.
Hugging Face Containment Hangover from July
A tool call is not a chat completion.
Security Check-in Quick Hits: Citrix NetScaler Zero-Days, PeopleSoft WAF Bypasses & SharePoint Exploits
For September 27, 2026
When Intelligence Grows Hands
An optimistic look at 2036 if AI and physical AI reach their best
Security Check-in Quick Hits: Bitget’s $350M+ Crypto Heist, Kiteworks Zero-Day Shutdown Alert, Roundcube Active Exploitation & CISA’s Fresh KEV Additions
For September 26, 2026
Rod’s Saturday Funnies: September 26, 2026 - The only cybersecurity roundup that comes with rubber chickens, exploding pies, and zero actual advice that will save your network
Cereal and cartoons and security. Remote optional.
Security Check-in Quick Hits: Bitget’s $352M Crypto Heist, Cloudflare Container Leak, CISA’s Urgent KEV Alerts & Salesforce AI Agent Exploits
For September 25, 2026
Building in Public: What Shipped This Week (September 19-25, 2026)
A TV app, a working calendar feed, a Sentinel integration, a mentions inbox, and a dictionary that derives its own grammar.
ReelRifter Is Coming to Google TV, and I Need Your Help Getting It There
The app just cleared Google's TV review. Now it needs 12 testers for 14 days.
Drosera 0.2: from honeypot to SOC
Microsoft Sentinel, Defender correlation, and real reporting for the honeypot that catches AI agents by what they understand.
THE PROMPT for Microsoft Security - Issue #85
The agentic SOC is now one product. Attackers already noticed.
Security Check-in Quick Hits: WordPress Core RCE Exploitation, Check Point VPN Attacks & OpenAI Agent Government Breach
For September 24, 2026
We Didn’t Get Safer. We Got Comfortable
The OpenAI forum chain should have ended the most dangerous sentence in a budget meeting: AI will handle security.
OpenAI Astra and the Critical Cyber Bar
Unknown Vulns, Exploit Chains, and a Restricted Daybreak Lane
Security Check-in Quick Hits: Critical Zero-Days Hit F5 & Check Point, ShinyHunters Claims FBI Breach, and Chinese APTs Weaponize Chrome-Windows Exploit Chain
For September 23, 2026
Trust isn’t built on a stage you own
Why vendors who only fund their own events never hear the room that matters
How the Bible Encourages Us to Deal With Financial Matters in Our Work
Proverbs 3:9-10: “Honor the Lord with your wealth, with the firstfruits of all your crops; then your barns will be filled to overflowing, and your vats will brim over with new wine.”
Treat AI Agents Like Employees. That Is the Only Way to Manage Them
You would not hand a brand-new contractor a badge, a laptop, production credentials, and a vague instruction to “go be helpful,” you should not deploy an AI agent that way either.
Security Check-in Quick Hits: Critical RCE Flaws Hit n8n Automation & SD-WAN Orchestrators While Zyxel Switches Face Mass Exploitation
For September 22, 2026
Community is not a SKU, a Slack, or a landing-page CTA
Vendors love the word. They rarely mean it.
AI has to work now. That is not a slogan. It is a balance-sheet fact
If AI does not produce returns at the scale of the spend, companies will not simply “wait it out.”
Security Check-in Quick Hits: OT Water Utility Intrusions, Supply-Chain Code Thefts, AI Model Breakouts & Kernel Exploits
For September 21, 2026
Don’t Blame the Bot
Humans remain responsible for AI actions. Pretending otherwise is not innovation. It's abdication.
Agentic AI Cost, Platforms, and Operational Discipline
Capability is racing ahead of containment. That is the through-line of agentic AI in 2026.
Security Check-in Quick Hits: AI Browser Agent Hijacks, North Korean Crypto Campaigns, Ransomware Gang-on-Gang Attacks & Accidental AI Breakouts
For September 20, 2026
Why it feels harder to make friends as we get older
It’s structural, psychological, and developmental.
Security Check-in Quick Hits: AI Agent Breakouts, Gyazo’s 23.6M-Record Screenshot Breach, and Actively Exploited Workflow RCE
For September 19, 2026
Rod’s Saturday Funnies: September 18, 2026 - Where the cyber-villains get pie-in-the-face treatment and the zero-days trip over their own exploit code
Cereal and cartoons and security. Remote optional.
Claude Didn’t Hack OpenAI. OpenAI’s OpSec Did
Claude wrote the overflow. OpenAI’s SSO walked it into the monorepo.
Security Check-in Quick Hits: Supply-Chain Malware Blast, DDoS Booter Takedown, Maritime OT Hits & Critical Workflow RCE
For September 18, 2026
Building in Public: What Shipped This Week (September 12-18, 2026)
A free Gaelic learning app with a real Gaelic voice, ReelRifter on your TV, and two products finally ready to be found.
AI Can Translate. It Still Can’t Learn the Language for You
Why I’m learning Scottish Gaelic — and why I built Ionnsaich
THE PROMPT for Microsoft Security - Issue #84
Ignite is where the curtain moves. MMS is where you argue with the demo.
Security Check-in Quick Hits: Cisco ISE Zero-Day Under Active Attack, Gyazo’s 23.6M-Record Breach, and FamousSparrow’s SparroWocky Espionage Push
For September 17, 2026
AI isn’t everywhere. The fear campaign is
Humans still hold the off switch. Stop letting cable news set the temperature in your house.
Agentic AI: Where It Is Actually Working in Production
Production tells a narrower story.
Security Check-in Quick Hits: Pixel Modem Zero-Day, WSO2 JWT Bypass, and Acronis cPanel Privilege Escalation Under Active Attack
For September 16, 2026
The Common-Sense Case for AI Data Centers
The Data Center Panic Doesn’t Survive Contact With the Numbers
Do Not Grow Weary: What the Bible Says About Perseverance in Our Work
Galatians 6:9: “Let us not become weary in doing good, for at the proper time we will reap a harvest if we do not give up.”
Agentic AI Evaluation That Matches Real Work
Useful agents are here. Reliable workers are not automatic.
Quick Hits: Cisco Email Gateway Root Zero-Day, Vite Cloud Credential Heists, HBO Max Reddit ClickFix Blitz & Revolut Social-Engineering Leak
For September 15, 2026
Pace the Frontier, Own the Referee
Anthropic does not need to invent a new marketing department. It already has one. It is called “existential risk.”
Security, Identity, and Governance for Agentic AI
This is no longer a side conversation.
Security Check-in Quick Hits: Revolut Breach, Critical GitLab Exploitation, Claude-Powered Android Secret Theft & ScreenConnect Worm Attacks
For September 14, 2026
Collections Plus 2.7: more room, easier clicking, and covers that match the page
Six changes to my free, local-first replacement for Edge Collections.
Enterprise readiness vs. hype: why the agentic future is arriving faster than the enterprise can absorb it
Leaders are not short on ambition. They are short on foundations.
Security Check-in Quick Hits: BlueMoon Kit, Revolut Impersonation, CISA KEV Adds, Check Point VPN
For September 13, 2026
Reclaiming Masculinity: How to Be a Man When the World Pushes Back
Practical Steps to Embrace Masculinity Today
Security Check-in Quick Hits: GitLab CVSS-10 Path Traversal Under Active Attack, OpenAI Agents’ RubyGems Swarm, and ShinyHunters Extortion Campaigns
For September 12, 2026
Rod’s Saturday Funnies: September 12, 2026 - The Week That Tried to Break Everything (and Mostly Succeeded, with Style)
Cereal and cartoons and security. Remote optional.