Articles

2026-03-09 Scaling Vulnerability Management with AI
2026-03-07 On Sandboxing Agents
2025-12-21 How I Think About Agentic Risks
2024-05-15 How to Sell to Security Teams
2020-11-28 Foundations of a Multi-Cloud Security Strategy
2020-11-15 The Quirks of Apps Script and Google Cloud
2020-11-08 Google Cloud Service Accounts Security Best Practices
2020-11-01 A Practical Introduction to Container Security
2020-10-25 Google Cloud IAM for Security Teams
2020-10-18 A Collection of Cloud Security Tools
2020-10-11 How to find and delete idle GCP Projects
2020-10-04 Docker Security Best Practices from the Dockerfile
2020-09-26 Shared Responsibility Models for Public Clouds
2020-09-17 Lateral Movement in the Cloud
2020-09-08 Stricter Access Control to Google Cloud Registry
2017-09-15 Forseti: Stepping Up the Cloud Security Game
2017-02-22 Google Cloud Security Toolbox
2016-02-05 Advanced Techniques for Detecting RAT Screen Control
2015-04-09 Beyond Superfish: a Journey on SSL MitM in the Wild
2015-02-28 FakeCommerce, an exercise in OSINT
2012-11-22 Vulnerable SWF Bundled in 40 Wordpress Plugins
2012-08-26 DOM XSS Honeypot
2012-08-14 Hunting Wordpress Exploitation in the Wild
2012-05-30 DLL and Code Injection in Python
2012-02-24 What's New in xsssniper 0.8.x
2012-01-21 WordPress Mingle Forum <= 1.0.32.1 Multiple Vulnerabilities
2012-01-21 WordPress Shortcode Redirect <= 1.0.01 Stored XSS
2012-01-19 WordPress uCan Post <= 1.0.09 Stored XSS
2012-01-10 WordPress Age Verification <= 0.4 Open Redirect
2012-01-06 WordPress Pay With Tweet <= 1.1 Multiple Vulnerabilities
2011-09-16 Introducing xsssniper
2011-06-14 Tor + Polipo on OpenBSD
2010-12-16 Run Xmonad on Snow Leopard
2010-11-25 Introducing Pepbot

#Advisory #Adware #Agents #Ai #Appsec #Automation #Aws #Azure #Banking #Ci #Claude-Code #Cli #Containers #Costs #Debugging #Declarative-Infra #Detection #Dll-Injection #Docker #Email #Expect #Fraud #Freebsd #Gcp #Gcr #Gcs #Github-Actions #Gsuite #Haskell #Honeypot #Iam #Incident-Response #Investigation #Javascript #K8s #Llm #Macos #Malware #Marketing #Mitm #Multi-Cloud #Open-Redirect #Openbsd #Osint #Pastebin #Penetration-Testing #Privacy #Product #Python #Qa #Rat #Recovery #Reverse-Engineering #Sandbox #Scaling #Screen-Control #Security #Sql-Injection #Ssh #Ssl #Stored-Xss #Superfish #Sysadmin #Terraform #Threat-Hunting #Threat-Modeling #Tools #Tor #Vulnerability-Management #Vulnerability-Research #Windows #Wordcamp #Wordpress #Xmonad #Xss