After 10 Years, I Finally Jumped On the Cybersecurity Certificate Bandwagon

Thymeleaf’s sandbox bypass shows how a parser edge case can turn a trusted rendering layer into a code execution risk. Explain This: The Thymeleaf Bug That Turned Whitespace Into Code …

CISA’s ActiveMQ KEV entry matters because it turns an exposed management path into a compressed remediation and evidence problem. The Docket: CISA’s ActiveMQ KEV Entry Is Really About Exposed …

Introduction

There is a specific kind of pressure that comes with cybersecurity work that is difficult to describe to people outside it. Every…

I do penetration testing for a living. I find the holes before someone with worse intentions does. That’s the job, stated cleanly. What’s…

Securing ‘The Chain of Custody’ in Software Releases. Yes, you read that right.

In March 2022, the Ronin Network — the blockchain underpinning Axie Infinity, one of the most successful Web3 games ever — suffered one of…

Why finding a CVSS 10.0 vulnerability is only half the job — and how I translated technical flaws into financial risk during my graduation…

What the 2024 Snowflake credential campaign reveals about the identity governance gap hiding inside your cloud security program