Blog

Write-ups on what the decoy sensors record and what I learn building the tools.

Latest research

Engineering reflections

When AI Becomes Another Thing to Manage

5 November 2026 · Jorge Aquino

I gave an AI agent responsibility for coordinating development. It caught real security problems, but I eventually found myself managing the AI manager.

API sensor notes

API decoy traffic: 24–25 October 2026

25 October 2026 · Jorge Aquino

Most runs contained one request. The published counts suggest that 11 longer runs generated most of the day’s traffic.

Honeypot observations

How SSH bots try to replace authorized_keys

15 October 2026 · Jorge Aquino

Two command patterns recorded about 150 times each in one week, what they attempt, and how to check your own servers.

For recent sensor data, visit the Threat Observatory.

Corrections and research questions: contact@vardrsec.com. Reports distinguish original observations from externally sourced research and identify revisions.