Writing
All posts, newest first. Technical analysis, incident breakdowns, and research notes.
-
Understanding Memory-Safe Languages in Critical Infrastructure
How Rust, Go, and similar languages are reshaping security posture in SCADA systems, medical devices, and transportation networks — and where the adoption bottlenecks actually are.
-
The Anatomy of a Supply Chain Attack
A technical reconstruction of the XZ Utils backdoor. How a multi-year social engineering campaign nearly compromised SSH on every major Linux distribution.
-
TLS Certificate Transparency: What Defenders Are Missing
CT logs are a goldmine for threat intelligence, but most security teams aren't watching them. A practical guide to monitoring, querying, and alerting on certificate issuance.
-
Reverse Engineering a Firmware Update Protocol
Pulling apart an IoT device's OTA update mechanism. From traffic capture to finding the signing vulnerability that lets you push arbitrary firmware.
-
OAuth 2.0 Misconfigurations in the Wild
A survey of the most common OAuth implementation mistakes across 200+ production applications, with proof-of-concept demonstrations and remediation patterns.