How AI Coding Sessions Can Create an Unexpected Cloud Bill
An AI coding task can make many billable requests while looking like one conversation. I explain the cost controls I would put around cloud-backed development agents.
Read articleBlog
Research, Security & Engineering Insights
Investigations, cloud security, careers, and building in public.
All articles
A Suspicious Login Is Not Proof of an Insider Threat
Behavioural anomalies can help direct an investigation, but they do not establish intent. I explain how context and corroboration change an insider-risk assessment.
Read article
WhatsApp Web Phishing Scam Exposed
A phishing page can trick you into linking WhatsApp Web to an attacker-controlled session. The sample I examined used a rotating QR code. This abuses device linking —…
Read article
Decoding Cybersecurity Roles: Analyst vs. Engineer vs. Researcher
Security analysts, engineers, and researchers overlap in real teams. Here is the practical difference in what each role produces — and where the lines blur.
Read article
How to Perform Forensic Investigation on an AWS Instance without a Public Key
Introduction Performing a forensic investigation on an AWS EC2 instance can become complicated if access to the instance is lost or the SSH key is unavailable. Recently, I…
Read article
Preventing Direct IP Access in CloudFlare
Recently, I was going through my LinkedIn feed and I found a post by Jake M. In the post, the author suggests a way to bypass Cloudflare’s protection…
Read article
23/06/2023 – BUGSKAN Chronicles Part 1
Starting a startup is every geek’s dream. Admit it, we all want a “company” of our own. It’s like a brand we build for ourselves, just like every…
Read article
19/06/2013 – My Return to the Blogosphere
A personal account of the family, work and research commitments that kept me away from blogging, and why I decided to start writing again.
Read article
What I Check Before Calling a Website Secure
A website review should explain its coverage and evidence. I describe how I would examine exposure, access, business workflows and recovery without treating a scan as a guarantee.
Read article
Why a Cleaned Website Gets Infected Again
A website can look clean while the original access path remains open. I explain how to separate malware removal, investigation and recovery when infections keep returning.
Read article