Web Security
Tired of proxies? Try AI-Intruder
I moved the proxy into the browser and gave it an analyst that never gets bored. A short hunt for reflected XSS and SQL injection, without leaving the tab.
Read · 2 min
Field notes.
Writing on offensive security, AI security, red teaming, exploit research and dark web monitoring.
AI Security
Before you ship an internal AI, read this
A model trained on your own data will answer questions about your own data — including the ones you did not intend. The risks in enterprise AI, and how to test for them.
Read · 2 min
AppSec
A six-step application security roadmap
Security does not arrive at 100% in one go. Six stages, from laying the foundations at 30% coverage through to zero trust and continuous operation.
Read · 2 min
Dark Web
A practical guide to dark web monitoring
Leaked credentials are sold somewhere before they are used against you. Why individuals and companies should be watching, and how to actually go about it.
Read · 2 min
AI Security
Working through the OWASP Top 10 for LLM Applications
OWASP's report organises the vulnerabilities specific to LLM applications into ten items. How each one actually shows up in a real application, and what to fix first.
Read · 4 min
AI Security
Prompt injection — talking a model out of its own rules
Ever been talked into doing all the chores by a sibling? That is prompt injection, and it is currently one of the hardest problems in applied AI security.
Read · 3 min
AI Security
How large language models actually work
Pre-training, fine-tuning, transformers and self-attention. Understanding the mechanism is what lets you judge where a model breaks and where the risk sits.
Read · 2 min
Japan
Cybersecurity awareness in Japan — the gap nobody is closing
Japanese companies are digitising fast, and security is the part that keeps getting left behind. Why the knowledge gap exists, and where to start closing it.
Read · 3 min
Web Security
Seven ways to protect WordPress from SQL injection
SQL injection is one of the most damaging attacks a WordPress site faces. The measures that actually work, in order of how much they matter.
Read · 2 min
No posts under that topic yet.