About Me

Understanding threat modelling, the STRIDE framework, and how a simple Data Flow Diagram can prevent security disasters before they happen.

You connect to hotel Wi-Fi after a long flight. A login page pops up — it looks routine. It isn’t.

Learn how Kali365 has been abusing Microsoft device login to gain OAuth tokens, targeting US firms, and how SOC teams can detect, hunt, and stop these phishing attacks.

At a glance Field Detail Actor Chinese-speaking operator, aliases knaithe and KnYuan Activity AI-enabled autonomous hacking campaign Targets Internet-exposed infrastructure, Chinese systems, and a…

For many years, enterprise cybersecurity was built around a simple assumption. The organization controlled a network boundary, employees…

Compare AI detection & response platforms for 2026, including Dash, Lakera, Operant AI, HiddenLayer and Prisma AIRS, for runtime threat protection and response.

What I learned while trying to turn architecture diagrams into traceable security decisions and actionable engineering work.

A technical walkthrough of deobfuscating JavaScript, dumping EVM bytecode, and resolving blockchain command and control infrastructure.

Why attackers model workflows while engineers secure endpoints