Assessing GitHub Copilot
My security review of GitHub Copilot, scored against the OWASP Top 10 for LLM Applications, with a straight answer at the end.
AI SecurityDeveloper Enablement Updated Jul 2026
Writing
Evergreen perspectives, not a news feed.
Outsmarting Vendor Email Compromise
VEC is phishing's more dangerous evolution: how it works, a realistic walkthrough of an attack, and the people-and-process defenses that actually stop it.
Security Fundamentals Updated Jul 2026
Disable XML-RPC
XML-RPC is a legacy WordPress feature most sites no longer need and attackers love. The risks, the tradeoffs, and three ways to turn it off.
Security Fundamentals Updated Jul 2026