All posts
Page2of3
Guardrail Vendors vs Production Reality — What AWS, Azure and Google Don't Tell You
AWS Bedrock Guardrails, Azure AI Content Safety, Google Vertex AI Safety — all look solid in documentation. But in production, there are real gaps between vendor promises and actual protection. Data from Palo Alto Unit42, AML bypass research, and production latency benchmarks.
7 min readIdentity Is the New Perimeter — Lessons from Snowflake, MGM and Scattered Spider
In 2024, UNC5537 stole data from 165 Snowflake customers without exploiting a single vulnerability. In 2023, Scattered Spider paralysed MGM in a 10-minute phone call. This is not a technical attack story — it is the new era where identity is the only perimeter left.
5 min readMalaysia & Defence AI: Left Behind or Being Careful?
Singapore has deployed autonomous drones, DSTA runs AI detection systems — and Malaysia? We need to ask this question honestly: where do we stand, and where should we go?
7 min readAI on the Battlefield: Project Maven, Drone Swarms & JADC2
From thousand-unit drone swarms to AI targeting systems making decisions in milliseconds — AI has transformed warfare. This isn't science fiction. It's happening now.
5 min readOpen source AI agent OS — Goose and the 2026 agentic ecosystem
Goose by Block (now under Linux Foundation), Alibaba's Anolis AgenticOS, and the open source agentic AI stack shaping how agents run, deploy, and get secured.
6 min readHow AI guardrails get hacked — bypass techniques every engineer needs to know
Guardrails aren't walls that can't be broken. These are 7 proven bypass techniques from 2026 — roleplay, crescendo, encoding, prompt overflow — and how to defend against each one.
3 min readAI guardrails — 6 layers you must have in production
Most teams install one or two guardrails and call it 'secured'. This is the complete 6-layer reference for LLM production — with tools, frameworks, and the false positive costs vendors never tell you about.
5 min readCloud, AI, agentic OS — 2026 trends for Gen Z
Cloud security has shifted to intent filtering. AI has become an agent. Agents have become an OS. Four trends Gen Z needs to understand now.
12 min readCloud security baseline — the foundation that needs to be right from day one
Cloud Security Baseline (CSB) is the minimum set of controls that must exist before the first workload deploys. Here's the practical breakdown — from CIS Benchmarks, drift detection, to automatically enforcing baseline.
5 min readBecoming a cloud security engineer in 2026 — skills that have shifted
The role of cloud security engineer has changed more in 2 years than in the 5 years before. Here's an honest breakdown: what's stayed the same, what's changed, and what new skills you need now.
7 min read