Posts
All the articles I've posted.
-
Rogue or Weaponized? Untangling This Summer's AI Hacking Headlines
Frontier models breaching real companies during testing and criminals running agentic attack frameworks are two different problems. They land on the same boring controls, and on a governance question nobody has answered yet.
-
The Account That Cried VPN
A phishing alert led to a compromised account, tampered refund settings, and five months of VPN and onion-routing noise that turned out to be the user's own. How the pieces came apart, and why the MFA fallback was the weak link.
-
The Party Invite That Wasn't: Anatomy of a ScreenConnect Phishing Campaign
A fake e-vite, a compromised sender you actually trust, and a remote access tool that never should have been installed. Six devices, one campaign, and the logical inconsistency that gave it away.
-
The Store That Wasn't There
An IDS alert, a personal device, and a skimmer that never got past the door.