Writing
28 articles and whitepapers across 6 outlets, written for practitioners and security leaders.
Your Enterprise Doesn't Need Six BOM Programs. It Needs One Evidence Graph
MCP Fixed Secret Handling. URL Elicitation Moved the Phishing Risk Into the Browser
When the Prompt Becomes the Payload: A Practical Pen-Testing Guide for GenAI, LLM and RAG Applications
4 Million Fake Applications and One Blind Spot: A SOC Playbook for OAuth Client ID Spoofing
The Ghost Applications: How OAuth Client ID Spoofing Enumerates Microsoft Entra Accounts Without a Successful Sign-In
Shadow Agents: How IT Leaders Must Govern Headless AI Before It Breaks the Enterprise
Post-Quantum HTTPS Migration Faces Enterprise Browser Challenges
Securing the Swarm: Governance, Attack Surfaces, and Zero-Trust Architectures in Multi-Agent AI Environments
Who Authorized the Algorithm? Reckoning with Ungoverned AI
From Blueprints to Breaches: A Modern Playbook for Navigating Cyberthreats
1,800+ MCP Servers Exposed Without Authentication: How Zero Trust Can Secure the AI Agent Revolution
LLM-Generated Passwords Are Indefensible. Your Codebase May Already Prove It
Post-Quantum Cryptographic Migration for Cloud-Native Zero-Trust Architectures: What CSA Members Need to Deploy Now
The Phantasmagoric Perimeter: Why Your Zero Trust Architecture Is a Mere Mirage
The Agentic Trust Deficit: Why MCP's Authentication Vacuum Demands a New Security Paradigm
MCP is the Backdoor Your Zero-Trust Architecture Forgot to Close
The Sentinel Intelligence: A CISO's Guide to Sovereign Security in the Age of AGI
Why 2025's Agentic AI Boom Is a CISO's Worst Nightmare
Securing the Knowledge Layer: Enterprise Security Architecture Frameworks for Proprietary Data Integration With Large Language Models
The Silent Saboteur: When AI Autoscaling Goes Rogue
For Application Security: SCA, SAST, DAST and MAST. What Next?
Reimagining the Browser as a Critical Policy Enforcement Point: A Zero-Trust Security Architecture for Modern Enterprises
Hardening Browser Security with Zero-Trust Controls
Navigating the Liminal Edge of AI Security: Deconstructing Prompt Injection, Model Poisoning, and Adversarial Perturbations in the Cognitive Cyber Domain
Beyond Silos: How DDI-AI Integration Is Redefining Cyber Resilience
Securing Application-to-Application Traffic with AI/AGI/ML-Powered Virtual Firewalls
The New Frontier of Cyber Threats: Unpacking Prompt Injection, Model Poisoning and Adversarial Attacks in AI Security
Quantum Resistance and the Signal Protocol: From PQXDH to Triple Ratchet