August 5, 2026The Warrant You'll Never See: How US Agencies Can Access Canadian Data Without a CourtHow Safe Are Canadians from US Surveillance They Never See? (Part 2 of 3)July 19, 2026They Don't Need a Warrant for What They Can Buy - Part 1This is the first of three short posts discussing one simple question: “How much of a Canadian's digital life can US authorities reach without you ever knowing?” Part 1 looks at the advertising technology you…
June 27, 2026One Pasword to Leak them All: Supabase’s Shared Database Credentials - 2If you are concerned about data sovereignty and love Supabase, you may consider self-hosting. However there are insecure defaults you need to be aware of. This blog post covers one of them.June 24, 2026Can the US Government Access Your Supabase Data?What are the common security, privacy, and hosting issues when using this popular platform? This is the first post in a series that discusses hosted versus self-hosted.
May 26, 2026The Agentic AI Threat LandscapeAgentic AI systems refer to systems that plan, use tools, and have a degree of autonomous action. This means that the risk has evolved from more than a LLM hallucinating your soufflé recipe but acting…
February 20, 2026The Agentic AI Skills Trap: Your Next Supply-Chain Problem (and It’s Already Here)Agentic AI isn’t just generating text — it runs a loop: assess → plan → act → learn . That changes the risk: mistakes aren’t just “bad answers,” they become bad actions[1] . And long-horizon, goal-driven…
October 22, 2025OWASP Amass 5 First LookWith the Internet, I’ve learned that if you stop to think, you’ll miss something.
September 16, 2025Why Over Complicating Threat Modeling Does More Harm Than GoodMany companies turn threat modeling into a confusing mess. Learn why simplicity is key, and how over engineering threat modelling can cause teams to give up.
September 6, 2025The Dawn of a Halcyon Age in Security TestingOr some may call it “The Consequences of Unfettered Vibe Coding”.
August 11, 2025Your Biggest Security Flaw Isn't in Your Code - It's on Your WhiteboardWhat if you could see the security flaws in your feature before an attacker does?
October 19, 2024The Importance of Client JavaScript ReconThis is a high level overview of performing reconnaissance against the JavaScript content in web applications. Subsequent articles will go into more details.August 12, 2024An Introduction to OWASP Amass 4 - Part 9 - Visualizing with oam_vizThe OWASP Amass project is an open-source, actively developed security tool with extensive community support that focuses on information gathering and reconnaissance. It helps security researchers and…August 9, 2024An Introduction to OWASP Amass 4 - Part 8 - Reviewing ResultsThe OWASP Amass project is an open-source, actively developed security tool with extensive community support that focuses on information gathering and reconnaissance. It helps security researchers and…July 17, 2024An Introduction to OWASP Amass 4 - Part 7 - In Depth Subdomain Enumeration and Network MappingThe OWASP Amass project is an open-source, actively developed security tool with extensive community support that focuses on information gathering and reconnaissance. It helps security researchers and…July 8, 2024An Introduction to OWASP Amass 4 - Part 6 - The Mysterious case of the Datasource listThe OWASP Amass project is an open-source, actively developed security tool with extensive community support that focuses on information gathering and reconnaissance. It helps security researchers and…July 6, 2024An Introduction to OWASP Amass 4 - Part 5 - ConfigurationThe OWASP Amass project is an open-source, actively developed security tool with extensive community support that focuses on information gathering and reconnaissance. It helps security researchers and…July 3, 2024An Introduction to OWASP Amass 4 - Part 4 - The CLIThe OWASP Amass project is an open-source, actively developed security tool with extensive community support that focuses on information gathering and reconnaissance. It helps security researchers and…June 28, 2024An Introduction to OWASP Amass 4 - Part 3 - The DatabaseThe OWASP Amass project is an open-source, actively developed security tool with extensive community support that focuses on information gathering and reconnaissance. It helps security researchers and…June 25, 2024An Introduction to OWASP Amass 4 - Part 2 - The DataThe OWASP Amass project is an open-source, actively developed security tool with extensive community support that focuses on information gathering and reconnaissance. It helps security researchers and…June 21, 2024An Introduction to OWASP Amass 4The OWASP Amass project is an open-source, actively developed security tool with extensive community support that focuses on information gathering and reconnaissance. It helps security researchers and…