-
Who else is connected to your messaging account?
Review messaging-account access, understand linked devices and practise checking an unexpected request with a fictional tech-event scenario.
-
Why a real Microsoft sign-in page can still be part of a scam
Understand device-code phishing through two fictional sign-in journeys, then learn which questions to ask before authorising a device.
-
You pushed an API key to GitHub. What should you do next?
Follow a fictional API-key leak from discovery to recovery, then use a practical checklist to keep credentials out of your next portfolio project.
-
ClickFix explained: when a fake CAPTCHA asks you to run a command
A fake verification check can ask you to run instructions on your computer. Learn how ClickFix works, when to stop and what to do if you have already interacted.
-
Before You Click ‘Allow’: Cyber Security in the Age of AI
Explore consent phishing, passkeys, AI agents and AI-assisted coding, with practical questions to ask before giving a tool access to your accounts or data.
-
Is your AI summary reliable? Build a five-case evaluation pack
A five-case exercise for checking AI summaries without letting invented actions or deadlines slip into a handover.
-
Your sprint is full of finished code. Why is nothing ready to release?
A practical queue review for sprint planning: inspect waiting work, identify the next action and agree one team experiment.
-
Before asking AI to fix it again, write a debugging evidence note
Turn repeated AI fixes into a focused investigation with a reading-list example and a reusable debugging evidence note.
-
When an AI feature fails: design a recovery route users can understand
Plan a clear recovery route for an AI feature with a fictional rota example, message comparison and reusable planning note.
-
How to mentor junior developers when AI can finish the task for them
A practical mentoring session that checks understanding, makes questions easier to ask and builds independent problem-solving.
