Bilingual field notes · EN / BM
Cloud security and AI guardrails, from production, not press releases.
Verified, source-linked notes on what actually breaks in cloud and AI systems: identity, posture, guardrails, and the vendor claims worth checking. Written in Malaysia for engineers everywhere.
- articles
- 21
- series
- 4
- last updated
Latest
AI guardrails in October 2026: attackers route around them, defences move outward
CrowdStrike, Anthropic, new research and a White House accord agree: guardrails inside the model are not the security boundary. What changed, and what to do.
AI guardrails in Malaysia: the law lands in 2027 — what engineers should prepare now
Malaysia's AI Governance Bill is drafted, an AI Safety Institute exists, and deepfakes are the daily fight. What's known, what isn't, and what to build now.
ASPM: What Actually Changes When You Merge SAST, DAST, and SCA Into One Risk View
AI-SPM Isn't a New Category — It's CSPM Learning to See AI Workloads
Series
- AI Guardrail EngineeringHow to design, test and break guardrails for LLM and agentic systems.
- Ground TruthResearch essays that check vendor and industry claims against primary sources.
- Cloud Security EngineeringPosture, identity and remediation for cloud security engineers.
- Military AI & DefenceMilitary AI and defence tech, with a Malaysian lens.
More articles
Malaysia's Birdie-X: A Few Hundred Ringgit Per Shot — How a Homegrown Laser Killed the Cost Equation
Birdie-X, the RMAF + STRIDE + Benua Defence anti-drone laser unveiled in June 2026, swaps a million-ringgit interceptor missile for a high-powered beam. Cost per engagement drops to a few hundred ringgit. Here is what the field notes say — and what they don't.
6 min readMalaysia's Military AI Push: Sovereign Ambition, Cloud-Security Blind Spots
TactiDrone's offline AI is a quiet admission about cloud-dependent C2 risk. The same gaps that plague government cloud security — talent shortage, silos, corruption risk — also bottleneck Malaysia's military AI.
9 min readShift-Left → Auto-Remediation → Agentic Remediation: The 2026 Vendor Landscape and a Palo Alto Cortex Cloud Deep Dive
From Checkov blocking PRs in CI to AI agents executing one-click fixes across code, cloud, and SOC — a vendor-by-vendor map of how cloud security moved from finding issues to fixing them, and where Palo Alto's Cortex Cloud platform sits in the race.
9 min readMalaysia's Military AI Infrastructure 2026 — Case Study and Threat Scenarios
PSPN 2026-2030, PSEP Cyber Command, STRIDE drone framework, CL-STA-1062 attacks on ASEAN critical infrastructure, TNB AI grid, and NACSA's Cryptology Centre — a case study on how Malaysia is building and defending military AI infrastructure amid real 2026 threats.
7 min readThe World Is Writing AI Law — What Engineers Actually Need to Know
EU AI Act enforcement began Feb 2025. Malaysia is finalising an AI Governance Bill. ASEAN has its own frameworks. Regulation is shaping how we build AI — whether we are paying attention or not. A guide for engineers.
6 min read