The Journal

The Journal.

A quiet record of what is actually happening, written for people who would rather understand a threat than fear it.

Every figure here is real, dated, and linked to its source. We explain what to watch for and how to check. We never print the attacker's playbook.

Written by Inés Navarro, lead operator, and Tomás Whitfield, fleet engineer. New entries roughly monthly.

No. 04 11 minute read

Attackers hired agents. So should you.

AI now runs most of a real intrusion campaign, and automated phishing gets clicked four times more often. What changes when the attacker is patient, tireless, and cheap, and what a family can actually do about it.

By Tomás Whitfield
No. 03 9 minute read

The quiet collapse of the basics.

Regular use of two-factor fell from 94% to 53% in three years, even as nearly three in four adults got scammed. The gap is no longer knowledge. It is follow-through, and a few habits carry most of the weight.

By Inés Navarro
No. 02 10 minute read

You built it in a weekend. Who checked it?

Scans keep finding thousands of apps built with AI tools leaking real customer data, including one study that counted about 16,000 exposed databases. A non-engineer founder can still ask the right questions.

By Tomás Whitfield
No. 01 10 minute read

The call that sounds like family.

A cloned voice needs only seconds of audio, and large impersonation losses among older adults have risen eightfold. One old habit, a shared family question, defeats most of it. Here is how to verify a distressing call.

By Inés Navarro