Reading Log

My Bookmarks & Notes for June 2026

22 links

  1. IIS Best Practices

    Microsoft Community Hub

    Is a 100GB AppPool a bad thing?

  2. Microsoft Scout documentation

    Microsoft Learn

    Great, but do we really trust MS to make this into something we can actually use? And if so, any chance we see this in GovCloud before 2035?

  3. dom-to-pptx

    GitHub

    Good agent skill for working with PowerPoint but still relies on low-quality vector graphics

  4. Upcoming breaking changes for npm v12

    GitHub Blog

    This is what happens when you keep getting hacked.

  5. Getting Started with OpenAI Models on Amazon Bedrock

    OpenAI Developers

    This is not going to end well.

  6. Hacking for Defense at Stanford 2026: Lessons Learned Presentations

    Steve Blank

    This is a good read to get insight into how the US military interacts with the academic community

  7. Oracle PeopleSoft servers hacked in ShinyHunters data theft attacks

    BleepingComputer

    To the surprise of absolutely no one

  8. Microsoft cloud solution architect agent skill

    officialskills.sh

    Surprisingly useful

  9. AI agent bankrupted their operator while trying to scan DN42

    Hacker News

    Good for a laugh

  10. Appreciating Exif

    Brent Fitzgerald

    Writeup about a core tool that everyone should have

  11. Copilot 365: Ways to Impress New Users?

    Reddit

    Good luck!

  12. humiliating iis servers for fun and jail time

    mll.sh

    Low hanging fruit, but still useful information

  13. Optimizing SharePoint content for Employee Self-Service agents

    Microsoft Learn

    Someone should have read this before rolling out 365 copilot.

  14. Prompt Injection as Role Confusion

    role-confusion.github.io

    Very insightful, especially the information about the early evolution of ChatGPT

  15. Google Cloud security best practices catalog

    Google Cloud Documentation

    Used as a reference to develop security baselines for Gemini

  16. CVE-2026-34908-check

    GitHub

    Fun times

  17. tokenspeed

    mikeveerman.github.io

    This is a really cool way to visualize token speed. The link is for GPT 5.6 running on their own silicon

  18. exploitarium

    GitHub

    Pure fucking bullshit. This is what happens when you believe Anthropic.

  19. Anatomy of a Failed Nation-State Attack

    grack.com

    When the nation is a 3rd world country

  20. Fintech Engineering Handbook

    w.pitula.me

    Looks good, but this is a case where the 10% that’s terrible advice will end up biting you in the ass

  21. Choosing a Public DNS Resolver

    evilbit.de

    Interesting

  22. entropyseal

    entropyseal.com

    This is what I click on at 3 AM

Elevated password spray activity across tenants. New actor spamming honeypots port 8080, same actor from Iran using proxies in Denver and Vegas to spam Azure CLI authentication endpoints.

Estimated that my API costs for things like Shodan, Censys, etc. have gone up 20% since the start of the year. I currently pay for 12 services. Time to start the annual cleanup

Tags:
← Back