SecOpsNomad — Breach analysisCybersecurity breaches explained through security impact, team responsibilities, and practical hunting. Independent analysis in English and Japanese.https://secopsnomad.si/enShadow AI on .si domains: when “AI” became “SI”.https://secopsnomad.si/blog/shadow-ai-si-domains/https://secopsnomad.si/blog/shadow-ai-si-domains/A US rename and a .si registration rush give unvetted AI tools a new name that word-based proxy, DLP and policy controls may not catch.Fri, 02 Oct 2026 00:00:00 GMTDIVD’s Zammad breach: the help desk belongs in the trust map.https://secopsnomad.si/blog/divd-zammad-boundaries/https://secopsnomad.si/blog/divd-zammad-boundaries/A support platform can connect sensitive conversations, privileged workflows, and the rest of the environment.Thu, 01 Oct 2026 00:00:00 GMTPentagon personnel-data exposure: patching does not close the data question.https://secopsnomad.si/blog/dmdc-data-exposure/https://secopsnomad.si/blog/dmdc-data-exposure/A long reported exposure window shifts the review toward retention, historical evidence, data ownership, and targeted impersonation.Thu, 01 Oct 2026 00:00:00 GMTJAEA: count the people, not just the downloaded files.https://secopsnomad.si/blog/jaea-cloud-files/https://secopsnomad.si/blog/jaea-cloud-files/JAEA’s cloud-service disclosure highlights sensitive uploads, supplier evidence, and the limits of an endpoint-only investigation.Thu, 01 Oct 2026 00:00:00 GMTMetaMask: an infrastructure incident needs a precise boundary.https://secopsnomad.si/blog/metamask-validator-incident/https://secopsnomad.si/blog/metamask-validator-incident/What an infrastructure incident means for service owners, key custody, partner assurance, and follow-on impersonation.Thu, 01 Oct 2026 00:00:00 GMTNetScaler: investigate the appliance after closing the vulnerability.https://secopsnomad.si/blog/netscaler-post-exploitation/https://secopsnomad.si/blog/netscaler-post-exploitation/New post-exploitation reporting offers leads for appliance logs, configuration exposure, and privileged changes.Thu, 01 Oct 2026 00:00:00 GMTZimbra: email security also needs visibility into the mail server.https://secopsnomad.si/blog/zimbra-mail-server-hunt/https://secopsnomad.si/blog/zimbra-mail-server-hunt/Microsoft’s exploitation report connects a mail-server weakness to host activity and published network indicators.Thu, 01 Oct 2026 00:00:00 GMT