The Incident Room

Monthly lessons from fresh disasters, with the names filed off.

Drop 001 — Three ways your app gets exposed

July 2026: open storage, naked databases, and launch posts that invite attackers.

Subscriber-only

0/3 scenarios fixedUnlock this door

Drop 002 — The trusted insider

August 2026: leaks that came from inside the codebase.

Subscriber-only

0/3 scenarios fixedUnlock this door

Drop 003 — Who let that run?

October 2026 release, reviewed 14 October: three drills from published 2025–2026 cases — bypassed auth, compromised builds, and setup hooks that ran before consent.

Subscriber-only

0/3 scenarios fixedUnlock this door