https://lwst.io/en/posts/ Recent content in Posts on lwst.io https://lwst.io/images/profile-crop.jpg https://lwst.io/images/profile-crop.jpg Hugo en Sun, 26 Apr 2026 00:00:00 +0000 https://lwst.io/en/posts/microsoft-entra-device-code-phishing/ Sun, 26 Apr 2026 00:00:00 +0000 https://lwst.io/en/posts/microsoft-entra-device-code-phishing/ A phishing wave against Microsoft 365 bypasses MFA and even phishing-resistant passkeys without faking a single pixel of Microsoft. What attackers do, why it works, and the conditional access policy that stops it. https://lwst.io/en/posts/sms-phishing-alphanumeric-senderids/ Sun, 26 Apr 2026 00:00:00 +0000 https://lwst.io/en/posts/sms-phishing-alphanumeric-senderids/ An SMS lands in the real Trade Republic chat — and costs a 63-year-old his retirement savings. What makes alphanumeric sender IDs so phishable, and why the UK and Singapore are ahead of Germany. https://lwst.io/en/posts/hallo-welt/ Sat, 25 Apr 2026 00:00:00 +0000 https://lwst.io/en/posts/hallo-welt/ The first post on lwst.io — what this blog is and who's behind it. No marketing language, no tool reviews — just notes from working in the field and studying.