# Latest **URL:** https://taggartinstitute.org/latest.md?page=1 [Latest](https://taggartinstitute.org/latest.md) · [Categories](https://taggartinstitute.org/categories.md) · [Tags](https://taggartinstitute.org/tags.md) **Page:** 2 --- ## [Wins and Gratitudes: 2026-08-14](https://taggartinstitute.org/t/wins-and-gratitudes-2026-08-14/799)
**Author:** [@mttaggart](https://taggartinstitute.org/u/mttaggart)\ **Replies:** 3\ **Last updated:** [August 19, 2026, 1:34am UTC](https://taggartinstitute.org/t/wins-and-gratitudes-2026-08-14/799 "2026-08-19T01:34:06Z")
I’m on vacation until 8/20, so this week’s W is the ability to disconnect. Also, I introduced my daughter to the place where I grew up, which might not seem like a big deal depending on your life experience, but since we… --- ## [SpecterOps Tradecraft Academy](https://taggartinstitute.org/t/specterops-tradecraft-academy/769)
**Author:** [@an00b](https://taggartinstitute.org/u/an00b)\ **Replies:** 1\ **Last updated:** [August 17, 2026, 2:16am UTC](https://taggartinstitute.org/t/specterops-tradecraft-academy/769 "2026-08-17T02:16:09Z")
It looks like SpecterOps recently dropped some free mini-courses. I haven’t had a chance to check them out but I know SpecterOps’ stuff is usually pretty good. https://academy.specterops.io/ --- ## [Wins and Gratitudes: 2026-08-07](https://taggartinstitute.org/t/wins-and-gratitudes-2026-08-07/791)
**Author:** [@mttaggart](https://taggartinstitute.org/u/mttaggart)\ **Replies:** 2\ **Last updated:** [August 10, 2026, 1:43am UTC](https://taggartinstitute.org/t/wins-and-gratitudes-2026-08-07/791 "2026-08-10T01:43:14Z")
Pretty light week on professional Ws this week, but I did have some technical victories with Wazuh in creating a SIEM for a honeynet. I think I’ll be able to share this soon as a nicer way to stand up a useful SIEM that’… --- ## [Pentesting with LLMs](https://taggartinstitute.org/t/pentesting-with-llms/789)
**Author:** [@LeonVQZ](https://taggartinstitute.org/u/LeonVQZ)\ **Replies:** 7\ **Last updated:** [August 6, 2026, 1:35pm UTC](https://taggartinstitute.org/t/pentesting-with-llms/789 "2026-08-06T13:35:58Z")
I wonder what everyone’s experience with LLMs for pentesting. I’ve been using GPT 5.6 Sol (although got kicked from the cyber program) and GLM 5.2. I’ve been getting good results with minimal input, smarter models once … --- ## [Sleuthing in North Korea](https://taggartinstitute.org/t/sleuthing-in-north-korea/790)
**Author:** [@maynard](https://taggartinstitute.org/u/maynard)\ **Replies:** 0\ **Last updated:** [August 6, 2026, 12:22pm UTC](https://taggartinstitute.org/t/sleuthing-in-north-korea/790 "2026-08-06T12:22:57Z")
“the hackers appeared to have infected themselves with their own malware—which, as a result, gave him access to the hackers’ workstations” --- ## [Wazuh 5.0 is looking great](https://taggartinstitute.org/t/wazuh-5-0-is-looking-great/758)
**Author:** [@mttaggart](https://taggartinstitute.org/u/mttaggart)\ **Replies:** 1\ **Last updated:** [August 6, 2026, 4:27am UTC](https://taggartinstitute.org/t/wazuh-5-0-is-looking-great/758 "2026-08-06T04:27:54Z")
I’ve been poking at alternatives for Elastic for a number of use cases, including including in The Homelab Almanac. While it’s still in beta (some sources say August release), version 5.0 of Wazuh is a complete rebuild. … --- ## [SQLite Critical CVEs or LLM Slop? - JFrog Security Research](https://taggartinstitute.org/t/sqlite-critical-cves-or-llm-slop-jfrog-security-research/788)
**Author:** [@mttaggart](https://taggartinstitute.org/u/mttaggart)\ **Replies:** 0\ **Last updated:** [August 3, 2026, 4:27pm UTC](https://taggartinstitute.org/t/sqlite-critical-cves-or-llm-slop-jfrog-security-research/788 "2026-08-03T16:27:00Z")
You have to wonder how much of this there is. --- ## [Wins and Gratitudes: 2026-07-31](https://taggartinstitute.org/t/wins-and-gratitudes-2026-07-31/784)
**Author:** [@mttaggart](https://taggartinstitute.org/u/mttaggart)\ **Replies:** 1\ **Last updated:** [August 2, 2026, 11:01am UTC](https://taggartinstitute.org/t/wins-and-gratitudes-2026-07-31/784 "2026-08-02T11:01:04Z")
Somewhat of a slow week over here, but a big W over in IFIN land: we got official 501(c)(3) recognition from the IRS! Going through that process was definitely a challenge. August is going to be pretty quiet around here… --- ## [Shiny, Sharp Objects](https://taggartinstitute.org/t/shiny-sharp-objects/781)
**Author:** [@mttaggart](https://taggartinstitute.org/u/mttaggart)\ **Replies:** 0\ **Last updated:** [July 27, 2026, 9:34pm UTC](https://taggartinstitute.org/t/shiny-sharp-objects/781 "2026-07-27T21:34:38Z")
Finally was able to cohere my thoughts about the OpenAI/Hugging Face debacle. We keep making weapons. We will always want to use them. Can we break the cycle? --- ## [Wins and Gratitudes: 2026-07-24](https://taggartinstitute.org/t/wins-and-gratitudes-2026-07-24/776)
**Author:** [@mttaggart](https://taggartinstitute.org/u/mttaggart)\ **Replies:** 1\ **Last updated:** [July 27, 2026, 12:12pm UTC](https://taggartinstitute.org/t/wins-and-gratitudes-2026-07-24/776 "2026-07-27T12:12:46Z")
A rather uneventful week over here, but I’ll take some recent IFIN reports as a W. Admittedly, IFIN is eating a lot of my time, but I am still working on the revamp of Python for Defenders. Doing it right is going to tak… --- ## [Debian proposes banning generative code](https://taggartinstitute.org/t/debian-proposes-banning-generative-code/777)
**Author:** [@mttaggart](https://taggartinstitute.org/u/mttaggart)\ **Replies:** 0\ **Last updated:** [July 25, 2026, 3:17pm UTC](https://taggartinstitute.org/t/debian-proposes-banning-generative-code/777 "2026-07-25T15:17:38Z")
Varying strength proposals here: --- ## [Winget can do DSC config now?!](https://taggartinstitute.org/t/winget-can-do-dsc-config-now/774)
**Author:** [@mttaggart](https://taggartinstitute.org/u/mttaggart)\ **Replies:** 0\ **Last updated:** [July 24, 2026, 4:38pm UTC](https://taggartinstitute.org/t/winget-can-do-dsc-config-now/774 "2026-07-24T16:38:22Z")
It can also run PowerShell scripts. This seems both useful and abuseful. --- ## [Wins and Gratitudes: 2026-07-19](https://taggartinstitute.org/t/wins-and-gratitudes-2026-07-19/768)
**Author:** [@neon\_leitz](https://taggartinstitute.org/u/neon_leitz)\ **Replies:** 2\ **Last updated:** [July 23, 2026, 7:13pm UTC](https://taggartinstitute.org/t/wins-and-gratitudes-2026-07-19/768 "2026-07-23T19:13:23Z")
Didn’t see a Wins and Gratitudes this weekend so here’s mine. W: Just moved my domain to Porkbun and I’ll be saving $20 per year :raising\_hands: . It’s not a lot in the scheme of things, but every little bit helps and n… --- ## [Brave’s latest browser release offers Containers for better and easier...](https://taggartinstitute.org/t/brave-s-latest-browser-release-offers-containers-for-better-and-easier/772)
**Author:** [@LeonVQZ](https://taggartinstitute.org/u/LeonVQZ)\ **Replies:** 3\ **Last updated:** [July 23, 2026, 12:46pm UTC](https://taggartinstitute.org/t/brave-s-latest-browser-release-offers-containers-for-better-and-easier/772 "2026-07-23T12:46:56Z")
Well, it seems that brave did the “impossible” and added containers to chromium. The question is, when will it to Vivaldi? --- ## [Passkeys are coming to Entra](https://taggartinstitute.org/t/passkeys-are-coming-to-entra/765)
**Author:** [@mttaggart](https://taggartinstitute.org/u/mttaggart)\ **Replies:** 0\ **Last updated:** [July 17, 2026, 4:44pm UTC](https://taggartinstitute.org/t/passkeys-are-coming-to-entra/765 "2026-07-17T16:44:25Z")
This is extremely good news! https://www.microsoft.com/en-us/security/blog/2026/07/13/microsoft-entra-id-security-updates-passkeys-are-the-default-authentication-method-in-entra-id/ Passkeys are an open standard and ma… --- ## [Chimera: A sandbox for untrusted code](https://taggartinstitute.org/t/chimera-a-sandbox-for-untrusted-code/761)
**Author:** [@mttaggart](https://taggartinstitute.org/u/mttaggart)\ **Replies:** 2\ **Last updated:** [July 16, 2026, 2:01am UTC](https://taggartinstitute.org/t/chimera-a-sandbox-for-untrusted-code/761 "2026-07-16T02:01:48Z")
This looks like a neat project that could be useful as part of an AI security stack in particular. By sandboxing binaries with an allow list of syscalls, you greatly reduce the attack surface for untrusted code/comman… --- ## [Register your own AMSI Provider](https://taggartinstitute.org/t/register-your-own-amsi-provider/757)
**Author:** [@mttaggart](https://taggartinstitute.org/u/mttaggart)\ **Replies:** 0\ **Last updated:** [July 13, 2026, 1:32pm UTC](https://taggartinstitute.org/t/register-your-own-amsi-provider/757 "2026-07-13T13:32:59Z")
Windows has example code now for implementing AMSI providers, and iPurpleTeam has a demo nefarious one. --- ## [Fediverse verification page reveals](https://taggartinstitute.org/t/fediverse-verification-page-reveals/755)
**Author:** [@maynard](https://taggartinstitute.org/u/maynard)\ **Replies:** 0\ **Last updated:** [July 11, 2026, 6:04pm UTC](https://taggartinstitute.org/t/fediverse-verification-page-reveals/755 "2026-07-11T18:04:39Z")
So far this month, over 2200 unique records in the form of "Mastodon/4.7.0-alpha.1+glitch (http.rb/5.3.1; +https://tilde.zone/)" deposited in the Apache log for anyone looking for a new instance to join --- ## [Wins and Gratitudes: 2026-07-10](https://taggartinstitute.org/t/wins-and-gratitudes-2026-07-10/754)
**Author:** [@mttaggart](https://taggartinstitute.org/u/mttaggart)\ **Replies:** 1\ **Last updated:** [July 11, 2026, 12:01pm UTC](https://taggartinstitute.org/t/wins-and-gratitudes-2026-07-10/754 "2026-07-11T12:01:51Z")
I made it in time this week! Been taking some Ls this week with Kibana/Elastic. To the point where I’m back to exploring Wazuh as a SIEM for the lab and for some honeypots. But at least the struggle will improve the ne… --- ## [Vivaldi prompting to disable manifest V2 extensions](https://taggartinstitute.org/t/vivaldi-prompting-to-disable-manifest-v2-extensions/749)
**Author:** [@LeonVQZ](https://taggartinstitute.org/u/LeonVQZ)\ **Replies:** 4\ **Last updated:** [July 11, 2026, 11:40am UTC](https://taggartinstitute.org/t/vivaldi-prompting-to-disable-manifest-v2-extensions/749 "2026-07-11T11:40:34Z")
I just got this prompt after updating Vivaldi today I still have installed the V2 version of uBO, and after updating to “8.1.4087.46 (Official Build) (arm64)” it seems that they’re doing this to prepare us for 8.2 or… --- ## [Process Parameter Poisoning: A New Process Injection Technique](https://taggartinstitute.org/t/process-parameter-poisoning-a-new-process-injection-technique/752)
**Author:** [@mttaggart](https://taggartinstitute.org/u/mttaggart)\ **Replies:** 0\ **Last updated:** [July 10, 2026, 1:37pm UTC](https://taggartinstitute.org/t/process-parameter-poisoning-a-new-process-injection-technique/752 "2026-07-10T13:37:39Z")
Been a minute since a new one of these dropped. --- ## [Sabotage at OpenMandriva](https://taggartinstitute.org/t/sabotage-at-openmandriva/751)
**Author:** [@mttaggart](https://taggartinstitute.org/u/mttaggart)\ **Replies:** 0\ **Last updated:** [July 9, 2026, 10:20pm UTC](https://taggartinstitute.org/t/sabotage-at-openmandriva/751 "2026-07-09T22:20:46Z")
Insane behavior --- ## [I've had it with Elastic](https://taggartinstitute.org/t/ive-had-it-with-elastic/750)
**Author:** [@mttaggart](https://taggartinstitute.org/u/mttaggart)\ **Replies:** 0\ **Last updated:** [July 9, 2026, 10:04pm UTC](https://taggartinstitute.org/t/ive-had-it-with-elastic/750 "2026-07-09T22:04:43Z")
After four days of fighting with trying to automate setup of Fleet, I think I might toss it out of the Almanac entirely. We’ll see. But I was informed that the documentation is now slop-heavy, and that tracks. Exhibit A… --- ## [KDE plasma window tiling](https://taggartinstitute.org/t/kde-plasma-window-tiling/748)
**Author:** [@neon\_leitz](https://taggartinstitute.org/u/neon_leitz)\ **Replies:** 1\ **Last updated:** [July 8, 2026, 6:23pm UTC](https://taggartinstitute.org/t/kde-plasma-window-tiling/748 "2026-07-08T18:23:47Z")
I just discovered KDE Plasma has some built in tiling functionality. Just hit Meta+T to open the menu where you can split and divide the tiles to your heart’s content. Then drag any window while holding Shift to drop it … --- ## [Wins and Gratitudes: 2026-07-03](https://taggartinstitute.org/t/wins-and-gratitudes-2026-07-03/745)
**Author:** [@mttaggart](https://taggartinstitute.org/u/mttaggart)\ **Replies:** 0\ **Last updated:** [July 6, 2026, 1:38am UTC](https://taggartinstitute.org/t/wins-and-gratitudes-2026-07-03/745 "2026-07-06T01:38:34Z")
Backdated to Friday, despite it being late. Not a lot of big wins this week, but it’s always nice to get a blog post out the door. Started working on the revision of Python for Defenders. That’s gonna be a big lift. I’… --- ## [Community Computing: The Future We Deserve?](https://taggartinstitute.org/t/community-computing-the-future-we-deserve/738)
**Author:** [@mttaggart](https://taggartinstitute.org/u/mttaggart)\ **Replies:** 1\ **Last updated:** [July 2, 2026, 12:57pm UTC](https://taggartinstitute.org/t/community-computing-the-future-we-deserve/738 "2026-07-02T12:57:19Z")
In which I discuss the benefits/drawbacks of offering computing services for a community as an alternative to big tech. --- ## [Quien: a quick IP/DNS disposition tool](https://taggartinstitute.org/t/quien-a-quick-ip-dns-disposition-tool/731)
**Author:** [@mttaggart](https://taggartinstitute.org/u/mttaggart)\ **Replies:** 1\ **Last updated:** [June 27, 2026, 2:30pm UTC](https://taggartinstitute.org/t/quien-a-quick-ip-dns-disposition-tool/731 "2026-06-27T14:30:58Z")
Been using this for reviewing IoCs recently, and it’s quite handy. --- ## [Web Tools 2026](https://taggartinstitute.org/t/web-tools-2026/624)
**Author:** [@mttaggart](https://taggartinstitute.org/u/mttaggart)\ **Replies:** 7\ **Last updated:** [June 26, 2026, 5:05pm UTC](https://taggartinstitute.org/t/web-tools-2026/624 "2026-06-26T17:05:45Z")
It’s been a minute since we’ve discussed tools for web tests. What are we using these days? Anything new and exciting we should know about? I’m still on the fence about Caido. ZAP has been fine, if a bit stale. I’m real… --- ## [Wins and Gratitudes: 2026-06-26](https://taggartinstitute.org/t/wins-and-gratitudes-2026-06-26/730)
**Author:** [@mttaggart](https://taggartinstitute.org/u/mttaggart)\ **Replies:** 0\ **Last updated:** [June 26, 2026, 4:03pm UTC](https://taggartinstitute.org/t/wins-and-gratitudes-2026-06-26/730 "2026-06-26T16:03:56Z")
Getting this in early so I don’t forget! Forgive yet another IFIN W, but I’m really happy with shipping RSS-Filter. It was so nice to write some more Rust and build a useful tool. I’m grateful this week to my wife, … --- ## [ZAP gets on the bug train](https://taggartinstitute.org/t/zap-gets-on-the-bug-train/727)
**Author:** [@mttaggart](https://taggartinstitute.org/u/mttaggart)\ **Replies:** 0\ **Last updated:** [June 24, 2026, 3:44pm UTC](https://taggartinstitute.org/t/zap-gets-on-the-bug-train/727 "2026-06-24T15:44:39Z")
See? It really can do everything Burp can do. [Previous page](https://taggartinstitute.org/latest.md) [Next page](https://taggartinstitute.org/latest.md?page=2)