Technical articles on cryptography, post-quantum standards, applied security, and systems engineering.
10 articles published
ZKPs let you convince a verifier that a statement is true while revealing zero information beyond that fact. Not an approximation, a strict mathematical guarantee. Here is how it actually works.
LLMs that browse the web, write code, and call APIs are a fundamentally different threat surface than chatbots. This post breaks down the attack classes unique to agentic systems and what defenders actually need to think about.
A practitioner's guide to the major cybersecurity frameworks governing financial institutions - DORA in the EU, the FFIEC guidelines in the US, and the SWIFT Customer Security Programme worldwide.
A practitioner's breakdown of PCI DSS v4.0 - its twelve requirements, the 2025 deadline for future-dated controls, and where organisations most commonly fall short.
Quantum computers will break RSA-2048 and ECC-256 in hours once they're powerful enough. Here's what that means for the systems we secure today - and how to prepare before it's too late.
A practical look at the most dangerous attack vectors targeting Azure environments right now, mapped to the AZ-500 control domains - identity, network, data, and detection.
How cloud computing transformed from shared hosting on steroids into the distributed, multi-layered infrastructure that now runs critical national infrastructure - and what comes next.
From rootless containers and read-only filesystems to image scanning and Seccomp profiles - a practical checklist for production-grade Docker security.
A deep dive into Content Security Policy (CSP) - what it is, how to craft a strict policy, and how to audit it with browser DevTools and security scanners.
A step-by-step guide to hardening a fresh Ubuntu/Debian server - from SSH lockdown and firewall rules to kernel parameter tuning and audit logging.
$ grep -r "" — 0 matches found.