# Lucas - bluwarden.com

Lucas focuses on organisational security and building software that doesn't fall over - secure development, cloud, and the operational side of keeping a company safe. He's the one asking what breaks in production, not just in theory, then writing it up so teams can act on it.

Every post is available as markdown at `/blog/<slug>.md`.

## Node.js Brotli and TLS Flaws: What to Patch

October 22, 2026 · Lucas · Development · 11 min read
Node.js fixed ten flaws on 21 October, including a Brotli bug reachable through fetch() and Express 5. Who's exposed, what to update, and the eMudhra CA block.
- HTML: https://bluwarden.com/blog/nodejs-brotli-tls-security-release
- Markdown: https://bluwarden.com/blog/nodejs-brotli-tls-security-release.md

## PHP2Shell: Who's Exposed and What to Patch

October 21, 2026 · Lucas · Threats · 21 min read
PHP2Shell is under attack: two critical PHP flaws let attackers run code on web servers without a login. Who's exposed, how to patch, and what to check for.
- HTML: https://bluwarden.com/blog/php2shell-critical-php-vulnerabilities
- Markdown: https://bluwarden.com/blog/php2shell-critical-php-vulnerabilities.md

## Fake CAPTCHA Scams: How to Spot Them

October 7, 2026 · Lucas · Awareness · 14 min read
Fake Cloudflare and reCAPTCHA checks trick you into pasting malware into your own PC. How the scam works, how to spot it, and what to do if you ran the command.
- HTML: https://bluwarden.com/blog/fake-captcha-scams
- Markdown: https://bluwarden.com/blog/fake-captcha-scams.md

## Device Trust: Why MFA Alone Isn't Enough

August 28, 2026 · Lucas · Business · 12 min read
Stolen sessions walk past MFA, so device trust became the answer. But device registration is self-service and compliance is self-reported. Here is what holds.
- HTML: https://bluwarden.com/blog/device-trust-what-it-actually-stops
- Markdown: https://bluwarden.com/blog/device-trust-what-it-actually-stops.md

## Scam Phone Numbers in Google AI Overviews

August 6, 2026 · Lucas · Awareness · 9 min read
Google and ChatGPT are surfacing scam customer service numbers as fact. Here's how the fraud works, the real cases behind it, and how to check before you call.
- HTML: https://bluwarden.com/blog/scam-phone-numbers-ai-overviews
- Markdown: https://bluwarden.com/blog/scam-phone-numbers-ai-overviews.md

## What Are Cybersecurity Services?

June 30, 2026 · Lucas · Business · 8 min read
A plain-language guide to what cybersecurity services include, why small businesses get targeted, and how to spot a good provider from an expensive one.
- HTML: https://bluwarden.com/blog/cybersecurity-services-what-they-are
- Markdown: https://bluwarden.com/blog/cybersecurity-services-what-they-are.md

## What Is Smishing? How to Stop Scam Texts

June 27, 2026 · Lucas · Awareness · 8 min read
Smart people click smishing links too. Why SMS scams work on the informed - and the iPhone and Android settings that protect you when you don't notice.
- HTML: https://bluwarden.com/blog/smishing-anatomy-phone-protection
- Markdown: https://bluwarden.com/blog/smishing-anatomy-phone-protection.md

## Password Best Practices: Passkeys & MFA

June 14, 2026 · Lucas · Hardening · 7 min read
Protect your accounts with strong passwords, passkeys and MFA - a plain-language guide to phishing-resistant authentication for people and for teams.
- HTML: https://bluwarden.com/blog/password-best-practices-2026
- Markdown: https://bluwarden.com/blog/password-best-practices-2026.md

## How to Secure Your Android Phone

June 2, 2026 · Lucas · Hardening · 7 min read
Secure your Android phone in 2026 using only built-in settings and your Google account - no extra apps. Covers screen lock, permissions, 2FA and anti-theft.
- HTML: https://bluwarden.com/blog/android-standard-security-hardening
- Markdown: https://bluwarden.com/blog/android-standard-security-hardening.md