~/blog
NOTES FROM
THE FIELD.
★ FEATUREDJun 30, 20267 MIN
Building an AI-assisted phishing triage pipeline
How I combined IOC extraction, reputation APIs, and an LLM verdict layer to cut email triage time by 70%.
READ →/ai-phishing-triage
SECURITY5 MIN
Wiring MITRE ATT&CK Into Your Own Software: TAXII, STIX, and Navigator Layers
Three practical ways to pull the ATT&CK knowledge base into your product — the official TAXII API, the mitreattack-python library, and generating Navigator layers — with code you can run today.
SECURITY6 MIN
Hardening a Linux VPS the boring, effective way
A checklist I actually use: SSH, firewall, fail2ban, unattended upgrades, and sane defaults that hold up.
CTF9 MIN
CTF writeup: chaining an IDOR into account takeover
A walkthrough of how a small authorization gap became a full takeover — and how to prevent it.
AI+DEV5 MIN
Prompt guardrails for LLM content pipelines
Keeping AI-generated content on-brand and factual: system prompts, validation, and human review gates.
older posts →