Latest posts
- A Cautionary Tale About Data Breach Claims, Verification and CarharttAug 25, 2026Troy Hunt
You're not going to believe this, but turns out you can't always take criminals at their word. Actually, I'll walk that back a bit as it may not even be the cybercrime guys who got this wrong, but it all starts here: 🚨Cyber
- Weekly Update 518: IoT Doorlock Nirvana with UniFiAug 24, 2026Troy Hunt
I genuinely think I've nailed the IoT door lock situation! Well, Ubiquiti has, but I think I've worked out how to put it all into a residential house and have it make sense. There are a few basic tenets: Main power (never have to rely on
- Welcoming the Sri Lankan Government to Have I Been PwnedAug 23, 2026Troy Hunt
Today, we welcome the 48th government onboarded to Have I Been Pwned’s free gov service: Sri Lanka. Sri Lanka CERT now has access to monitor Sri Lankan government domains against the data in HIBP, helping identify exposed government accounts and respond when they appear in new data breaches.
- Weekly Update 517: Cyber RansomsAug 18, 2026Troy Hunt
The current ransomware situation is a bit of a kludge (deep breath): a lot of ransomware (which often doesn't even involve "ware", it's just extortion) is carried out by kids who successfully make a truckload of money but can't spend it without
- Weekly Update 516: Live From VietnamAug 12, 2026Troy Hunt
A little wind noise, a little connectivity flakiness, and a little lip-sync issues from YouTube, but look at that view! 🤩 Back to business, it's the Brinks Home FAQ I found most interesting this week. I mean, how do you write your own FAQ then fail to
- Welcoming the Nepalese Government to Have I Been PwnedAug 03, 2026Troy Hunt
Today, we welcome the 47th government onboarded to Have I Been Pwned’s free gov service: Nepal. Their National Cyber Security Centre now has access to monitor Nepalese government domains against the data in HIBP. This gives the NCSC the ability to identify exposure across government email addresses and
- Weekly Update 515: Seeking Caffeine UtopiaAug 03, 2026Troy Hunt
Apparently, Aussies are so obsessed with coffee that it's referred to as the coffee capital of the world down here (some bits, at least). "But what about Italy?" people ask. Having spent a lot of time in a lot of Italy, no, it's just
- Weekly Update 514: This Week in Data BreachesJul 26, 2026Troy Hunt
The Origin Energy breach down here in Aus is all over the news this week, and as with many breaches, it's multi-faceted. You've got them leading with "don't worry, your credit card is fine", the hacker leading with "they didn&
- Weekly Update 513: Clauding The Home NetworkJul 21, 2026Troy Hunt
I reckon this week's video on how Claude is tying together info from UniFi, Home Assistant and the Pi-Hole is an absolute ripper. Or at least the concept is - if ever there was an actual value proposition for AI it's taking lots of noise and
- Weekly Update 512: IoT Lockout FailJul 15, 2026Troy Hunt
"Build a smart home", they said. "It'll make life so much better", they said. Well, life wasn't very bloody good at 23:00 the other night after travelling 33 hours from Paris only to find the IoT doorlock batteries dead and the
- Weekly Update 511: Live from my Riad in MarrakechJul 08, 2026Troy Hunt
How's this for a location?! I mean, last week was nice with Scott in Mallorca, but Marrakech is, well, wow 😮 Anyway, about those data breaches... This week I'm talking about the futility of attempting to remove piss from a pool, yet here we are, with
- Swimming Pools, Pee, and Trying to Delete Your Data From the InternetJul 03, 2026Troy Hunt
I can't recall if someone else originally came up with this saying or if I said it in some off-the-cuff comment and it just propagated, but since it's often attributed back to me, I'll relay it here regardless: Trying to delete yourself
- Weekly Update 510: Live From Mallorca with Scott HelmeJun 30, 2026Troy Hunt
How's the view?! Back to business, it's now 8 years ago that Scott and I thought it would be a cool idea to build Why no HTTPS? We used the site to shame companies for not implementing their transport later security property, and to make it
- Weekly Update 509Jun 24, 2026Troy Hunt
I know enough about home cinema audiovisual to know there's a lot I don't know. It's conscious incompetence, if you like, which is different to the unconscious incompetence most people have on the topic. That's not to sound derogatory (it's
- Weekly Update 508Jun 15, 2026Troy Hunt
Light switches. How on earth is it so hard to find decent light switches?! It sounds ridiculous until you actually spend enough time looking for ones that meet two simple criteria: Aren't stateful (switch is up or down, has to be push-button) Looks good Now, I'