The CPR Number Was Never a Secret
· 11 min read · 12 sources
Denmark calls the CPR number confidential and uses it to identify everyone. What a security professor calls the register's largest breach was caught by an invoice.
Threat Analysis
Understanding cyber attacks, attack vectors, vulnerability research, and adversary techniques.
The Trust You Cannot Outsource: Notes From V2 Security 2026
· 12 min read · 4 sources
Cloud and AI dominated every booth at V2 Security 2026. Both move trust somewhere you cannot inspect, a strange direction for the security industry to take.
Malicious Compliance: How Trusted Packages Turn Into Attack Vectors
· 12 min read · 4 sources
Modern software runs thousands of packages from strangers. Run npm install and you run code from people you never met. Supply chain attacks exploit that trust daily.