Technical Research & Papers
Deep dives into AI security architectures, zero-trust cryptographic primitives, post-quantum encryption, and low-level kernel telemetry.
Shadow AI: When Employees Deploy Agents Faster Than Security Can Catch Them
Shadow AI is AI tools and agents deployed without security review. Learn the risks, from credential theft to prompt injection, and how to govern it.
Post-Quantum Cryptography Is Closer Than You Think
Post-quantum cryptography is urgent now. What NIST's FIPS 203, 204 and 205 standards cover, why harvest-now-decrypt-later matters, and how to start migrating.
Continuous Exposure Management: The End of Quarterly Vulnerability Scans
Quarterly scans leave gaps attackers exploit. Continuous Exposure Management maps attack paths, covers identities, and prioritizes by real exploitability.
Software Supply Chain Attacks Quadrupled. Here's Why.
Large supply chain compromises nearly quadrupled since 2020, per IBM X-Force. The real attack vectors, why they work, and three practices that cut your risk.
AI-Driven SOC: Why Analysts Need New Skills in 2026
AI SOC tools only help when analysts can judge their output. The skills SOC teams need in 2026, how to build the training program, and what to measure.
Agentic AI Oversight: A Framework for CISO Risk Classification
A three-dimension framework for classifying AI agents by data sensitivity, autonomy, and operational scope, with matching controls for each risk tier.
Identity Security for Machine Actors at Scale
Machine identities outnumber human ones and get far less oversight. How to discover, rotate, scope, and own service accounts, API keys, and workload identities.
AI-Driven Malware: Why Behavior-Based Detection Is the Only Way Forward
Malware like PROMPTFLUX now queries LLMs for new evasion code at runtime. Why behavior-based EDR, attack-path analysis, and credential hygiene matter more.
Deepfake Defense: Protecting Your Organization in 2026
Deepfake video and voice fraud now targets finance, HR, and help desks. Learn the defense layers: out-of-band verification, provenance, detection, and training.
API Security in the Age of AI Agents
AI agents call APIs at machine speed and can follow injected instructions. Secure APIs with least privilege, response sanitization, and behavior monitoring.
Cloud Security Posture Management: What CSPM Does and How to Evaluate It
What cloud security posture management does, how it differs from CWPP and manual audits, and how to evaluate a CSPM platform against your own cloud estate.
Ransomware Resilience: Immutable Backups and Incident Response Orchestration
How to build ransomware resilience with immutable, isolated backups and a rehearsed incident response playbook, drawing on CISA, FBI, KELA and Verizon data.
Edge Security for IoT and 5G Networks
How to secure IoT devices, edge servers and 5G links: unique device identity, encrypted communication, segmentation, signed firmware, and retrofitting fleets.
Security Behavior Culture Programs for GenAI
Why annual awareness training fails for GenAI risks, and how to build a security behavior and culture program that reduces shadow AI and unsafe AI use.
Zero Trust for AI Workloads
How to apply zero trust to AI agents, models and data pipelines: workload identities, least privilege, data segmentation, monitoring and human approval.
What Is Cascadia? A Dart CSS Selector Engine, Explained [2026]
Cascadia is a Dart CSS selector engine that parses and matches CSS Selectors Level 3 and 4 in pure Dart, with no browser APIs and full Flutter support.
How Automous Replaces Manual Linux Server Hardening with One Profile-Driven Command
Linux server hardening automation gets practical with Automous, a Python tool that runs the UT Austin and imthenachoman checklists in one command.
Snatch Download Manager: How a Rust App Splits Files Into 16 Parallel Parts
I built Snatch, a Rust download manager for Linux with a GTK4 UI. It splits files into 16 parallel parts via aria2 and resumes dropped downloads.
Case Study: Building AnimeDives, a Metadata-First Anime Discovery Platform
How I built AnimeDives, a metadata-only anime discovery platform: a completed-only archive for 2000-2026, rankings, and a public JSON API with llms.txt.
Case Study: Building PokéEvent, a Timezone-Correct Pokémon GO Event Tracker
How I built PokéEvent: it pulls Pokémon GO event times from the official news feed, converts them with IANA rules, and shows live per-region countdowns.
PhoenixDB: An ACID Embedded Database for Flutter and Dart
PhoenixDB is a Rust-backed ACID embedded database exposed to Dart and Flutter through a zero-overhead FFI layer. Here's what that means for your app's local data layer.
Case Study: Building The Health and Care, a Clinician-Reviewed Health Publication
How I built The Health and Care: a clinician-review pipeline, an hourly FDA recall tracker, dated corrections, and RSS and llms.txt for a health publication.
Case Study: Building The Fashion & Beauty, a Calm Editorial Beauty Platform
How I built The Fashion & Beauty: an eight-section taxonomy, a catalogue tagged by concern, an editor-ranked trending feed, a forum, and a weekly newsletter.
Proxipy: A Production-Ready CORS Proxy Built With FastAPI
Proxipy is a FastAPI CORS proxy that bypasses same-origin policy and mixed-content issues, with load balancing, rate limiting, health checks, and HAProxy-style stats.
AeroLLM: High-Performance LLM Routing and Proxy in Go
AeroLLM is a Go-based LLM router and proxy with multi-provider routing, agentic tool execution, Redis caching, OpenTelemetry, guardrails, FinOps, and WASM sandboxing.