Writing

Articles, op-eds and technical commentary. Pieces first published elsewhere are listed with a short summary and a link to the original.

  1. Google Just Tested One of the Quiet Assumptions Behind Breaking RSA

    Medium (first published externally)

    Commentary on a reported first demonstration of magic state cultivation on real quantum hardware, and why it matters to cryptographers watching the path towards breaking RSA.

  2. HollowLock: Post-Quantum TLS Posture Scanner

    Medium (first published externally)

    Why turning post-quantum TLS on and enforcing it are different states, and a tool that tells them apart by running the real handshakes: enforced, partial or hollow.

  3. Kestrel: Finding Post-Quantum Cryptography Inside Compiled Binaries

    Medium (first published externally)

    How Kestrel identifies ML-KEM and ML-DSA in stripped binaries from the constant tables their arithmetic cannot do without, what a sweep of 6,224 Linux binaries turned up, and where the method stops.

  4. Panopticon: Behavioural Abuse Detection Engine

    Medium (first published externally)

    Why rate limiting by IP address trusts the wrong signal, and an engine that clusters traffic on behaviour and JA4 fingerprints, with a population check for fleets that look too unique to be real.

  5. 10 Open-Source Threat Hunting Tools to Catch Post-Quantum Ransomware

    Medium (first published externally)

    A survey of open-source threat-hunting tools for detecting modern, automated ransomware.

  6. 5 Best Open-Source API and Web App Pentesting Tools

    Medium (first published externally)

    Five open-source tools for API and web application penetration testing and bug bounty work.

  7. 5 Best Open-Source Tools to Defend Against Autonomous Cyberattacks

    Medium (first published externally)

    Open-source alternatives to expensive commercial tooling for defending against automated, autonomous attacks.

  8. Building an Autonomous AI Security Shield for Enterprise Architecture

    Medium (first published externally)

    Security architecture once the enterprise perimeter has dissolved into distributed cloud environments, remote workforces and third-party APIs.

  9. How to Secure LLM Applications: Prompt Injection to Layer 7 Gateways

    Medium (first published externally)

    The new class of vulnerabilities that large language models bring into enterprise software, from prompt injection to application-layer gateways.

  10. Why Traditional SOCs Are Blind to Agentic AI Attacks

    Medium (first published externally)

    Why security operations centres built to catch human attackers miss attacks run by autonomous AI agents.