https://cedricvrvrd.github.io/Recent content in Home on Heading NorthHugo -- gohugo.ioen© 2026 Cédric VERVOORDTue, 20 Oct 2026 00:00:00 +0000https://cedricvrvrd.github.io/projects/tssr-infrastructure/Wed, 14 Jan 2026 00:00:00 +0000https://cedricvrvrd.github.io/projects/tssr-infrastructure/The practical exam of my systems and networks diploma: a Windows domain, GLPI authenticated against Active Directory, inter-VLAN routing and a startup GPO.https://cedricvrvrd.github.io/heading-north-lab/scenario/Sun, 11 Oct 2026 00:00:00 +0000https://cedricvrvrd.github.io/heading-north-lab/scenario/A travel agency hacked in peak season, a partner bound by NIS2, one sysadmin to rebuild everything. Meet the fictional company behind the lab.https://cedricvrvrd.github.io/projects/piquante/Sat, 26 Nov 2022 00:00:00 +0000https://cedricvrvrd.github.io/projects/piquante/The only back-end project of my web developer training, and the closest to what I do today: a Node.js API where most of the work is about security.https://cedricvrvrd.github.io/heading-north-lab/phase-00-plan/Sun, 11 Oct 2026 00:00:00 +0000https://cedricvrvrd.github.io/heading-north-lab/phase-00-plan/From a flat network to a segmented infrastructure where every flow goes through a firewall: the target architecture and the 13 phases to reach it.https://cedricvrvrd.github.io/projects/kasa/Sat, 26 Nov 2022 00:00:00 +0000https://cedricvrvrd.github.io/projects/kasa/The last project of my web developer training: a home rental app in React, built from reusable components.https://cedricvrvrd.github.io/projects/kanap/Fri, 30 Sep 2022 00:00:00 +0000https://cedricvrvrd.github.io/projects/kanap/Making an e-commerce site dynamic in plain JavaScript: catalogue loaded from an API, cart, form validation and checkout.https://cedricvrvrd.github.io/projects/la-panthere/Thu, 11 Aug 2022 00:00:00 +0000https://cedricvrvrd.github.io/projects/la-panthere/Taking over a web agency’s website and fixing it: SEO, page weight, accessibility, and removing abusive SEO tricks.https://cedricvrvrd.github.io/projects/ohmyfood/Tue, 28 Jun 2022 00:00:00 +0000https://cedricvrvrd.github.io/projects/ohmyfood/Building a mock-up mobile first, with Sass and pure CSS animations: loading screen, dishes appearing, hover effects.https://cedricvrvrd.github.io/projects/gaming-campus/Wed, 30 Nov 2022 00:00:00 +0000https://cedricvrvrd.github.io/projects/gaming-campus/A practice exercise: recreating a school’s home page in HTML and CSS, with Flexbox, Grid and a responsive layout.https://cedricvrvrd.github.io/projects/bubble-game/Mon, 09 Jan 2023 00:00:00 +0000https://cedricvrvrd.github.io/projects/bubble-game/A short JavaScript exercise: creating elements on the fly, handling clicks and animating bubbles with CSS.https://cedricvrvrd.github.io/tech-watch/connectwise-cloud-backup/Tue, 20 Oct 2026 00:00:00 +0000https://cedricvrvrd.github.io/tech-watch/connectwise-cloud-backup/The attackers didn’t hack a single account: they signed in as ConnectWise’s backup app, already trusted by its customers. User MFA never came into play.https://cedricvrvrd.github.io/tech-watch/nextcloud-built-in-code/Tue, 20 Oct 2026 00:00:00 +0000https://cedricvrvrd.github.io/tech-watch/nextcloud-built-in-code/A Nextcloud app described as meant for testing let anyone run commands on the server without logging in. Attackers planted web shells, and disabling the app wasn’t enough.https://cedricvrvrd.github.io/tech-watch/broadcom-wps/Tue, 20 Oct 2026 00:00:00 +0000https://cedricvrvrd.github.io/tech-watch/broadcom-wps/A flaw in Broadcom’s old WPS module affects routers and ISP boxes from many brands. It can be exploited within radio range, without the Wi-Fi password. No CVE, and no fix for some older models.https://cedricvrvrd.github.io/tech-watch/wiped-appliance-logs/Tue, 20 Oct 2026 00:00:00 +0000https://cedricvrvrd.github.io/tech-watch/wiped-appliance-logs/Ivanti Connect Secure and BeyondTrust Remote Support: two flaws, two attackers, and in both cases logs wiped or altered on the compromised device. Logs that stay on the box prove nothing anymore.https://cedricvrvrd.github.io/fun-facts/the-viking-behind-bluetooth/Fri, 16 Oct 2026 00:00:00 +0000https://cedricvrvrd.github.io/fun-facts/the-viking-behind-bluetooth/Bluetooth was only meant to be a temporary code name, borrowed from a Viking king. It never got replaced.https://cedricvrvrd.github.io/tech-watch/github-secrets-not-revoked/Sun, 11 Oct 2026 00:00:00 +0000https://cedricvrvrd.github.io/tech-watch/github-secrets-not-revoked/Out of 1.1 million credentials exposed on public GitHub repositories, 543,699 still worked in July 2026. The problem isn’t the leak, it’s the missing revocation.https://cedricvrvrd.github.io/fun-facts/the-75-cent-hacker/Fri, 09 Oct 2026 00:00:00 +0000https://cedricvrvrd.github.io/fun-facts/the-75-cent-hacker/In 1986, a 75-cent gap in a lab’s billing led an astronomer turned sysadmin to a hacker selling secrets to the KGB.https://cedricvrvrd.github.io/contact/Mon, 01 Jan 0001 00:00:00 +0000https://cedricvrvrd.github.io/contact/https://cedricvrvrd.github.io/cv/Mon, 01 Jan 0001 00:00:00 +0000https://cedricvrvrd.github.io/cv/