George Chen·May 20CVE-2026-5511 — Improper Input Validation on TP-Link’s Archer AX72via Diagnostic Interface
George Chen·Apr 8Measuring What We’re MissingIn my last article, I argued that most cyber metrics tell us how busy we are, not how effective we are. That piece focused on the gap. This…
George Chen·Mar 26Vulnerability Management as a Feedback SystemA vulnerability gets detected. A ticket is created. A patch is applied. The dashboard improves.
George Chen·Mar 8Your SOC Is Measuring Efficiency, Not EffectivenessThis may sound obvious, yet many cyber organizations focus heavily on measuring:
George Chen·Mar 4Reactive ≥ ProactiveAn unpopular security opinion, and an intentionally provocative title.
George Chen·Jun 11, 2025More privacy on VPN? Think again.Using a VPN is essentially routing your traffic through another (person’s) computer. Other than the question of whether the other computer…
George Chen·Apr 21, 2025Microsoft ActiveSync Legacy Protocol — Plaintext Credential and Token Exposure VulnerabilityThe Ongoing Exposure of ActiveSync