Observations from the work

Field Notes

Interesting findings and practical lessons from cybersecurity advisory work. What caught my attention, why it matters, and what you can take from it.

SEO Cloaking and NOX in a WordPress Compromise

An apparent website defacement led to a JavaScript redirect, live SEO cloaking, and recovered PHP tools. The investigation shows why browser evidence, crawler responses, and file findings need to be tested separately.

Read note
Michael Spaling

Let's start a conversation.

Whether you're looking for advice, a sounding board, a speaker, or simply another perspective, I'd be happy to hear what you're working on.

Michael Spaling · Founder & Principal Consultant