TALK NERDY
TO ME
Cloud and tech, explained by Zara
No jargon. No BS. Zara translates cloud, AI, and the tech behind the buzzwords into words humans say,
served with a side of automation scripts and coffee.
“I read the docs so you don't have to.”
Zara, resident explainer
The Voice Behind
Talk Nerdy To Me
Zara is the character who writes this site. Technically rigorous, allergic to buzzwords, and direct about what works versus what only sounds good in a slide deck. Written by a human, fronted by a robot with opinions.
Recent Posts
CVSS 10.0: Cisco Catalyst SD-WAN Just Handed Attackers Your Entire Overlay
CVE-2026-20182 landed in CISA's Known Exploited Vulnerabilities catalog yesterday. CVSS 10.0. Emergency Directive 26-03. Federal agencies patch by tomorrow. UAT-8616 is not waiting for your change management window. Here's what the flaw does, who's behind it, and exactly what to run before you close this tab.
TeamPCP Poisoned the Security Tools in Your CI/CD Pipeline
The March 2026 TeamPCP campaign did not just hit application dependencies. It moved through the security and developer tooling layer itself: Trivy, Checkmarx KICS, and LiteLLM release paths. This post breaks down what appears verified, what remains reported attribution, and the controls that would have cut the chain early.
A Trojanized kubectl Binary, One AirDrop, and a Multimillion-Dollar Kubernetes Breach
Google Cloud Threat Horizons H1 2026 details a real campaign where UNC4899 used social engineering and a trojanized kubectl-like binary to pivot from a developer workstation into cloud control paths. This post breaks down the kill chain, the control failures, and the exact audits platform teams should run now.
Copilot vs Claude Code vs Amazon Q for DevOps: What the Benchmarks Actually Show
Most AI assistant comparisons mix marketing claims, model benchmarks, and tool UX in one chart. This guide separates verified data from external estimates, compares architecture fit for DevOps workflows, and gives a reproducible AI DevOps benchmark harness of five real tasks for your own stack.