Independent security journal

Security mistakes happen.
Learn. Test. Fix.

Practical cybersecurity research and response playbooks for the people who keep real systems running — clear, useful, and free of hype.

~/notmyfault/manifesto.txt

$ cat principles

01verify the source

02explain the risk

03give the next step

// no fear-driven marketing

Latest articlesOrder: publish date ↓

Latest security research

Practical, source-backed, and reviewed for operational relevance.

Critical
IncidentComing soon8 min read

Your Microsoft 365 account was breached. What now?

The actions that matter in the first hour: contain access, preserve evidence, and find out what changed.

Microsoft 365Entra IDExchange
Sources includedReview status visibleActionable playbook
IR-001
High
VulnerabilityComing soon6 min read

A Fortinet vulnerability, without the marketing fog

What is actually exposed, how to check your environment, and which vendor recommendations matter first.

FortiGateFortiOSVPN
Vendor advisoryCVE referenceLast reviewed
CVE-WATCH
Lab
Hands-on labComing soon15 min read

Build your first SIEM home lab

A safe, repeatable exercise in log collection, detection rules, and your first incident investigation.

LinuxWazuhSyslog
Safe setupDifficulty shownExpected outcome
LAB-004
Medium
HardeningComing soon10 min read

Audit your MikroTik router security in 20 minutes

A focused checklist for administrative access, firewall rules, updates, and configuration backups.

MikroTikRouterOSFirewall
Version scopeSafe checksRollback notes
HARDEN-012
All articles are coming soon

Written to help you act.

01

Sources, not rumours

Vendor documentation, CVEs, and primary sources are shown with the article.

02

Visible review dates

You can see when the information was last checked and what changed.

03

Clear severity

Priority is visible before you open the article, with context for the rating.