~/blog
NOTES FROM
THE FIELD.
★ FEATUREDJun 18, 20267 MIN
Building an AI-assisted phishing triage pipeline
How I combined IOC extraction, reputation APIs, and an LLM verdict layer to cut email triage time by 70%.
READ →/ai-phishing-triage
SECURITY6 MIN
Hardening a Linux VPS the boring, effective way
A checklist I actually use: SSH, firewall, fail2ban, unattended upgrades, and sane defaults that hold up.
CTF9 MIN
CTF writeup: chaining an IDOR into account takeover
A walkthrough of how a small authorization gap became a full takeover — and how to prevent it.
AI+DEV5 MIN
Prompt guardrails for LLM content pipelines
Keeping AI-generated content on-brand and factual: system prompts, validation, and human review gates.
older posts →