Sign in Subscribe
Shakel Ahmed

Shakel Ahmed

United Kingdom
Shakel Ahmed is a cybersecurity practitioner with 20+ years of experience defending global organizations. As the founder of CyberDesserts, he provides hands-on, practical guidance to help professionals master the skills that actually matter.
24
May
What is a JA3 Fingerprint? How TLS Client Fingerprinting Works

What is a JA3 Fingerprint? How TLS Client Fingerprinting Works

Recognise the software behind any encrypted connection from its TLS handshake alone. How JA3 fingerprinting works, how to read one, and what a single hash reveals about shared attacker tooling.
7 min read
23
May
AndroxGh0st and the limits of TLS fingerprinting

AndroxGh0st and the limits of TLS fingerprinting

May 2026 The same scanner toolkit AWS attributed to Interlock ransomware in March 2026 also runs AndroxGh0st credential theft and
11 min read
20
May
Exposed AWS Credentials Are Used in Under 90 Seconds: Findings from AI Infrastructure Research

Exposed AWS Credentials Are Used in Under 90 Seconds: Findings from AI Infrastructure Research

Exposed AWS credentials were used against live AWS APIs within 67 seconds of being harvested, faster than CloudTrail delivers the first event to a defender.
9 min read
17
May
shai-halud sandworm related to the npm supply chain attacks and a pattern of trust-flow exploit

Is npm Safe? A Practitioner Guide to npm Security in 2026

May 2026 Is npm safe to use in 2026? Yes, but the threat model has shifted. The risk in 2025-
12 min read
14
May
The Scanners Mapping AI Infrastructure Aren't After Your Model. They're After Your Credentials.

The Scanners Mapping AI Infrastructure Aren't After Your Model. They're After Your Credentials.

460 source IPs, 11,643 requests, 72 hours against exposed AI infrastructure. The operators that recognised it were cataloguing; the ones attacking were after credentials that sit on any exposed host.
7 min read
14
May
Low-angle view of two glass corporate skyscrapers, one bearing the TOTAL logo, against a pale overcast sky.

Cybersecurity Compliance Career Guide 2026

May 2026 Most career advice treats compliance as the boring corner of cybersecurity. Twenty years working with enterprise security teams
18 min read
03
May
Wooden Scrabble tiles spelling CYBER on a wooden table

Is Cybersecurity a Good Career in 2026? The Honest Reality

May 2026 Cybersecurity is still a good career in 2026 but the market is far more uneven than most career
11 min read
14
Apr
A glasswing butterfly resting on a green leaf, its transparent wings revealing the leaf surface beneath

Fable 5 Is Frozen and Glasswing Still Leaves Two Problems Open

Last updated: 30 June 2026 | What's changed: both models were suspended on 12 June under a US export
8 min read
08
Apr
Scattered Spider: The Attack Chain, Hard Lessons, and What Comes Next

Scattered Spider: The Attack Chain, Hard Lessons, and What Comes Next

April 2026 Scattered Spider is a financially motivated cybercrime collective responsible for some of the most disruptive attacks in recent
18 min read
07
Apr
Developer desk with a "No Bad Days" sign, keyboard, coffee mug and monitor taken before the axios npm supply chain attack made March 31 2026 a very bad day

Axios NPM Supply Chain Attack (2026): What Happened and What to Do

On March 31, 2026, two malicious versions of the axios npm package were published using a compromised maintainer account. The
8 min read