Resources · Blog

Notes from the field on security, AI, and risk.

Writing on cybersecurity, AI governance, cloud, Kubernetes, and application security — drawn from real engagements and industry conversations.

February 19, 2026Cyber Security

The Velocity of Risk: Why Your Quarterly Board Deck Can’t Keep Up with AI

The boardroom has a rhythm. Every quarter, we walk in, plug in our laptops, and project a deck that brings a collective sigh of relief: The “Close-to-Green” Security Dashboard.

October 17, 2024Cyber Security

Guarding the Gates: Detecting and Preventing Prompt Injection Attacks in Generative AI with Open-Source Solutions

Large Language Models (LLMs), often referred to as Generative Artificial Intelligence (GenAI), are now leading to breakthroughs in many areas. However, with technological advancements come...

October 8, 2024Cyber Security

Model Cards: The Key to Transparent and Ethical AI Development

Artificial intelligence is transforming manufacturing, banking, and even healthcare. It’s behind everything from personalized Netflix recommendations to life‑saving medical diagnostics. Data and...

March 21, 2024Cyber Security

OWASP LLM Top 10 – Let’s dig into it

As artificial intelligence rapidly evolves, Large Language Models (LLMs) have emerged as powerful tools, transforming industries from customer service to content generation. However, with great...

March 18, 2024Cyber Security

Red Team and GenAI

The experience gained as a red teamer can significantly contribute to the adoption and integration of Generative AI (GenAI) in multiple facets, particularly in ensuring its secure, ethical, and...

March 16, 2024Cyber Security

10k and 8k – reporting requirements

Form 10-K and Form 8-K are filings required by the U.S. Securities and Exchange Commission (SEC) from publicly traded companies. They provide investors with a comprehensive summary of a company’s...

March 5, 2024Cyber Security

Navigating the AI Frontier with Insights on Use Cases, Implementation, Security, Privacy, and Ethical Dilemmas

Have you heard of Generative AI? Unless you have been sitting under the rock for the last two years or so, the answer is likely a resounding “yes.” Since ChatGPT took the world by storm in Nov...

February 13, 2024Cyber Security

Navigating the Exciting World of Code Generation with an Eye on Mitigating Risks

With the advent of any new technology or disruptive innovation, from autonomous vehicles to artificial intelligence and blockchain, comes an array of risks that must be meticulously managed and...

January 24, 2024Cyber Security

Modern Approach to Software Composition Analysis – Call Graph and Runtime SCA

Since the early 2000s, the industry has seen a rapid expansion in open-source adoption. Embracing open source is a strategic decision for cost savings and innovation towards a more collaborative,...

January 15, 2024Cyber Security

Modern Approach to Vulnerability Management – EPSS

Making accurate predictions before acting is crucial for good decision-making. Being able to intelligently guess what might happen next and getting ready for it can really improve our chances of...

January 9, 2024Cyber Security

Embracing the Importance of AI: The Necessity of Regulations in the AI Landscape

Artificial intelligence (AI) is machine intelligence that mimics a human mind’s problem-solving and decision-making capabilities to perform various tasks. AI uses algorithms and techniques such as...

January 4, 2024Cyber Security

Securing the Cyber Frontier: Navigating Vulnerability Management Domain with Different Approaches and Prioritization Strategies

In today’s digital age, businesses are experiencing significant changes due to business and digital transformations. It’s not just about upgrading technology; it involves a complete rethink of how...

November 25, 2023Cyber Security

Guardians of Cyber Realms: Unleashing the Power of Security Awareness in Organization

In today’s rapidly evolving digital landscape, organizations require security awareness training more than ever before to safeguard against escalating threats and vulnerabilities. The...

October 10, 2023Cyber Security

Fortify and Thrive: Elevating Your Defenses with an Application Security Uprising

In the ever-evolving landscape of the digital age, markets, and industries undergo constant transformations. The norm now is online transactions, simplifying the process of gathering customer...

September 26, 2023Cyber Security

Securing the Vision: Guiding Non-Profit Organizations through the Digital Era amidst Cyber Challenges

Non-profit organizations are essential for addressing societal challenges, promoting social responsibility, and driving positive change. They play a crucial role in managing various critical...

September 20, 2023AppSecCyber Security

Securing your Mobile Applications – Why it is important and how to do this effectively?

In the contemporary business landscape, mobile phones and mobile applications have seamlessly integrated themselves as indispensable facets of a company’s digital presence. Enterprises now heavily...

May 24, 2023GenAI

CI/CD Top Ten

The foundation of the modern software delivery process is Continuous Integration/Continuous Delivery (CI/CD) and all its supporting procedures and systems. These processes compile the code from a...

May 24, 2023Cyber SecurityGenAI

Evolving domain of External Attack Surface Management

External Attack surface management (EASM) is the continuous process of identifying unknowns, discovery, analysis, remediation, and monitoring the attack vectors of an organization’s external...

May 24, 2023GenAI

The Importance of Signing Container Images: Ensuring Security and Trust

Containers have become widely popular for packaging applications and their dependencies, enabling easy deployment across different environments. Indeed, containers have gained widespread...

May 20, 2023Cyber SecurityGenAIData Poisoning

Concerns around Intentional bias in GenAI by Data Poisoning

Data poisoning in AI tools refers to the malicious manipulation of training data used to train machine learning models. It involves introducing deliberately crafted or manipulated data into the...

May 18, 2023Cyber Securityappsec

Scaling Safely: The Crucial Role of Application Security Maturity Models

The maturity model is a framework that describes the different stages of organizational maturity in a particular domain, such as project management or software development.

May 16, 2023Cyber SecuritySilos

Breaking Organizational Silos

You may wonder why we are talking about silos in the context of AppSec, establishing and maturing the AppSec program. This is an extension to a talk presented at a...

May 16, 2023Cyber SecurityNFL SecurityProcessesRisk Management

Scoring a Touchdown in AppSec: Learning Risk-Based Strategies from the NFL Playbook

Super Bowl LVII is less than two weeks away (when writing this blog), and the excitement is growing as we inch closer to the kickoff day on Feb 11th. With new developments and advancements across...