personal
After publishing here for months, I'm moving my writing to X. Here's why and where to find me going forward. I've been writing on this blog for a long time. Long enough that the posts span different eras of how I thought about security,
preparedness
Ten refineries destroyed in 21 days across four continents. All reported as unrelated accidents. Here is what the pattern reveals and what you can actually do about it.
security
Homograph attacks have been known for two decades, yet they still fool even security-conscious users. The problem isn't awareness. It's that checking URLs visually exploits a fundamental mismatch between how computers see characters and how humans see them.
ai
What if the ransom you negotiate today funds the attack that takes your business offline tomorrow? That's the paradox at the heart of ransomware economics. When organizations face an active incident, the pressure to pay feels overwhelming. Executives see the ransom demand, do the math, and conclude that
ai
Money was invented to manage scarcity. AI is making scarcity optional. The gap between the system we have and the world we're building is widening faster than anyone seems willing to acknowledge.
ai
3,000 new data centers. 90+ gigawatts by 2030. Residential electricity rates climbing. This is what happens when AI's infrastructure boom collides with a grid that wasn't designed for it.
Compliance frameworks establish a security floor, but sophisticated threat actors don't audit for compliance - they audit for gaps. In OT/ICS environments, those gaps are both pervasive and poorly understood.
ai
The cybersecurity industry has a workforce gap of approximately four million professionals globally, according to multiple industry surveys. Meanwhile, threat volumes continue their relentless climb. Enter AI agents, marketed as the solution that will automate away the workload, compress response times from hours to seconds, and ultimately make the SOC
security
Purple team exercises show 88% effectiveness rates and 3-5x ROI, yet only 26% of organizations use them. The real barrier isn't technical—it's organizational.
health
A documentary analysis of the alternative cancer treatment conversation circulating on alternative media platforms, examining the claims, the figures involved, and what regulatory bodies actually say.
ai
A practical implementation guide for securing file upload pipelines in LLM applications. Covers multi-cloud configurations, sandboxed parsing, content disarmament, and verification procedures with specific commands and code examples.
ai
A comprehensive advisory on securing file upload pipelines for LLM applications. Covers parser exploits, prompt injection vectors, and defense-in-depth architectures based on CVE-2025-66516 and OWASP Agentic Top 10 2026.
