Latest writing

Edition 008 of The Signal Watchtower. Coverage window 16 to 31 May 2026. Trust is no longer a static assumption. It is a live control.

Read edition

Edition 007 of The Signal Watchtower, published 15 May 2026. Coverage window 1 to 15 May 2026. Attackers are moving through the systems organizations rely on most.

Read edition

Edition 006 of The Signal Watchtower, published 30 April 2026. Coverage window 16 to 29 April 2026. Trusted systems are becoming attacker leverage: AI tools, developer pipelines, SaaS integrations and security tooling.

Read edition

Edition 005 of The Signal Watchtower, published 31 March 2026. Coverage window 16 to 30 March 2026. Third-party concentration risk, identity theft and a sharper enterprise exploitation signal.

Read edition

Edition 004 of The Signal Watchtower, published 15 March 2026. Coverage window 1 to 15 March 2026. Identity exposure, enterprise control planes and renewed attention on Linux infrastructure.

Read edition

Edition 003 of The Signal Watchtower, published 27 February 2026. Identity exploitation and data publication as principal risk vectors, with KEV additions across browser and webmail platforms.

Read edition

Edition 002 of The Signal Watchtower, published 29 January 2026. Ransomware-led extortion, ambient credential exposure and the widening gap between exploitability and prioritisation.

Read edition

Edition 001 of The Signal Watchtower, published 16 January 2026. Breaches driven by the trust plane: third-party commerce and support platforms, social engineering and mass identity exposure.

Read edition