Security updates and recent engagements.

Real-world cyber stories.

Security events learnings.

Technical challenges.

Insights from the trenches.

See updates
Industry Analysis

The ISO 27001 Deadline Already Passed: Is Your Certificate Still Valid?

There's no such thing as "ISO 27001:2026," but plenty changed anyway. Here's what the 2025…
Technical Field Notes

500 automated attacks against an on-prem AI. The grandma attack passed nearly half the time.

I ran 500 automated attacks against an on-prem AI. The grandma attack passed nearly half…
Industry Analysis
Microsoft killing SMS MFA: What SMEs need to know
Technical Field Notes
Four security issues found in a Supabase App before it went Live
Technical Field Notes
I Red Teamed a Local AI in 20 minutes
OWASP Top 10
Industry Analysis
OWASP published the Agentic Top 10. Here is what it means if you are a CTO at an African fintech deploying AI agents
Industry Analysis
Your annual pentest expired the moment you merged to main. The half-life of a pentest report in a modern CI/CD shop
Technical Field Notes
Five Okta deployment failure modes I keep seeing in African fintechs
Updates
Libertad joins the Okta Partner program to secure Africa’s AI-Driven Identity Perimeter
Industry Analysis
Why small businesses are paying for security they don’t have
Updates
Don’t let the flowers wilt