Field notes on cloud security and AI guardrails. Written for engineers who build and defend modern systems.https://malay-tech-journal.pages.dev/en-ushttps://malay-tech-journal.pages.dev/en/posts/gt-06-csa-top-threats-2026/https://malay-tech-journal.pages.dev/en/posts/gt-06-csa-top-threats-2026/Cloud Security Alliance ranks inadequate IAM — driven by non-human identity sprawl — as the #1 cloud threat for 2026, with two AI-related risks debuting on the list. What actually changed, and what it means for cloud teams.Thu, 27 Aug 2026 00:00:00 GMTiamcloudsecurityaimalaysiaGround Truthhttps://malay-tech-journal.pages.dev/en/posts/mad-02-birdie-x/https://malay-tech-journal.pages.dev/en/posts/mad-02-birdie-x/Birdie-X, the RMAF + STRIDE + Benua Defence anti-drone laser unveiled in June 2026, swaps a million-ringgit interceptor missile for a high-powered beam. Cost per engagement drops to a few hundred ringgit. Here is what the field notes say — and what they don't.Tue, 28 Jul 2026 00:00:00 GMTaisecuritymalaysiamilitarydroneMilitary AI & Defencehttps://malay-tech-journal.pages.dev/en/posts/gt-05-military-ai-cloud-blind-spots/https://malay-tech-journal.pages.dev/en/posts/gt-05-military-ai-cloud-blind-spots/TactiDrone's offline AI is a quiet admission about cloud-dependent C2 risk. The same gaps that plague government cloud security — talent shortage, silos, corruption risk — also bottleneck Malaysia's military AI.Mon, 27 Jul 2026 00:00:00 GMTaisecuritymalaysiacloudmilitaryGround Truthhttps://malay-tech-journal.pages.dev/en/posts/cse-03-shift-left-agentic/https://malay-tech-journal.pages.dev/en/posts/cse-03-shift-left-agentic/From Checkov blocking PRs in CI to AI agents executing one-click fixes across code, cloud, and SOC — a vendor-by-vendor map of how cloud security moved from finding issues to fixing them, and where Palo Alto's Cortex Cloud platform sits in the race.Wed, 15 Jul 2026 00:00:00 GMTcloudsecurityaiguardrailtoolingCloud Security Engineeringhttps://malay-tech-journal.pages.dev/en/posts/gt-04-malaysia-military-ai/https://malay-tech-journal.pages.dev/en/posts/gt-04-malaysia-military-ai/PSPN 2026-2030, PSEP Cyber Command, STRIDE drone framework, CL-STA-1062 attacks on ASEAN critical infrastructure, TNB AI grid, and NACSA's Cryptology Centre — a case study on how Malaysia is building and defending military AI infrastructure amid real 2026 threats.Mon, 13 Jul 2026 00:00:00 GMTaisecuritymalaysiacloudGround Truthhttps://malay-tech-journal.pages.dev/en/posts/gt-03-ai-regulation/https://malay-tech-journal.pages.dev/en/posts/gt-03-ai-regulation/EU AI Act enforcement began Feb 2025. Malaysia is finalising an AI Governance Bill. ASEAN has its own frameworks. Regulation is shaping how we build AI — whether we are paying attention or not. A guide for engineers.Sun, 12 Jul 2026 00:00:00 GMTaisecuritycloudmalaysiaGround Truthhttps://malay-tech-journal.pages.dev/en/posts/gt-02-guardrail-vendors/https://malay-tech-journal.pages.dev/en/posts/gt-02-guardrail-vendors/AWS Bedrock Guardrails, Azure AI Content Safety, Google Vertex AI Safety — all look solid in documentation. But in production, there are real gaps between vendor promises and actual protection. Data from Palo Alto Unit42, AML bypass research, and production latency benchmarks.Sat, 11 Jul 2026 00:00:00 GMTaiguardrailcloudsecurityGround Truthhttps://malay-tech-journal.pages.dev/en/posts/ground-truth/https://malay-tech-journal.pages.dev/en/posts/ground-truth/Essays and case studies on the global cloud security and AI guardrail engineering landscape — perspective, analysis, and real threat scenarios from a Malaysian and ASEAN context.Fri, 10 Jul 2026 00:00:00 GMTcloudsecurityaiguardrailGround Truthhttps://malay-tech-journal.pages.dev/en/posts/gt-01-identity-perimeter/https://malay-tech-journal.pages.dev/en/posts/gt-01-identity-perimeter/In 2024, UNC5537 stole data from 165 Snowflake customers without exploiting a single vulnerability. In 2023, Scattered Spider paralysed MGM in a 10-minute phone call. This is not a technical attack story — it is the new era where identity is the only perimeter left.Fri, 10 Jul 2026 00:00:00 GMTcloudsecurityiamGround Truthhttps://malay-tech-journal.pages.dev/en/posts/mad-03-malaysia-defence/https://malay-tech-journal.pages.dev/en/posts/mad-03-malaysia-defence/Singapore has deployed autonomous drones, DSTA runs AI detection systems — and Malaysia? We need to ask this question honestly: where do we stand, and where should we go?Wed, 08 Jul 2026 00:00:00 GMTaisecuritycloudMilitary AI & Defencehttps://malay-tech-journal.pages.dev/en/posts/mad-01-battlefield/https://malay-tech-journal.pages.dev/en/posts/mad-01-battlefield/From thousand-unit drone swarms to AI targeting systems making decisions in milliseconds — AI has transformed warfare. This isn't science fiction. It's happening now.Tue, 07 Jul 2026 00:00:00 GMTaisecuritycloudMilitary AI & Defencehttps://malay-tech-journal.pages.dev/en/posts/military-ai-defence/https://malay-tech-journal.pages.dev/en/posts/military-ai-defence/Field notes on AI in defence — from autonomous battlefield systems and drone swarms, to the hard question: where does Malaysia stand in this landscape?Tue, 07 Jul 2026 00:00:00 GMTaisecuritycloudMilitary AI & Defencehttps://malay-tech-journal.pages.dev/en/posts/age-04-agent-os-goose/https://malay-tech-journal.pages.dev/en/posts/age-04-agent-os-goose/Goose by Block (now under Linux Foundation), Alibaba's Anolis AgenticOS, and the open source agentic AI stack shaping how agents run, deploy, and get secured.Mon, 06 Jul 2026 00:00:00 GMTaisecurityguardrailcloudtoolingAI Guardrail Engineeringhttps://malay-tech-journal.pages.dev/en/posts/ai-guardrail-engineering/https://malay-tech-journal.pages.dev/en/posts/ai-guardrail-engineering/Field note series on AI Guardrail Engineering — covering the 2026 trend landscape, 6-layer production defense, bypass techniques, and the open source agent OS ecosystem. For Cloud Security and AI engineers.Mon, 06 Jul 2026 00:00:00 GMTaisecurityguardrailtoolingAI Guardrail Engineeringhttps://malay-tech-journal.pages.dev/en/posts/cloud-security-engineering/https://malay-tech-journal.pages.dev/en/posts/cloud-security-engineering/Field note series on Cloud Security Engineering — shifting skills, modern tooling, and how engineers navigate a landscape that has converged with AI and agentic systems.Mon, 06 Jul 2026 00:00:00 GMTcloudsecurityiamtoolingCloud Security Engineeringhttps://malay-tech-journal.pages.dev/en/posts/age-03-bypass-techniques/https://malay-tech-journal.pages.dev/en/posts/age-03-bypass-techniques/Guardrails aren't walls that can't be broken. These are 7 proven bypass techniques from 2026 — roleplay, crescendo, encoding, prompt overflow — and how to defend against each one.Sun, 05 Jul 2026 00:00:00 GMTaisecurityguardrailcveAI Guardrail Engineeringhttps://malay-tech-journal.pages.dev/en/posts/age-02-6-lapisan/https://malay-tech-journal.pages.dev/en/posts/age-02-6-lapisan/Most teams install one or two guardrails and call it 'secured'. This is the complete 6-layer reference for LLM production — with tools, frameworks, and the false positive costs vendors never tell you about.Sat, 04 Jul 2026 00:00:00 GMTaisecurityguardrailtoolingAI Guardrail Engineeringhttps://malay-tech-journal.pages.dev/en/posts/age-01-trend-2026/https://malay-tech-journal.pages.dev/en/posts/age-01-trend-2026/Cloud security has shifted to intent filtering. AI has become an agent. Agents have become an OS. Four trends Gen Z needs to understand now.Fri, 03 Jul 2026 00:00:00 GMTaisecurityguardrailtoolingcloudAI Guardrail Engineeringhttps://malay-tech-journal.pages.dev/en/posts/cse-02-cloud-baseline-security/https://malay-tech-journal.pages.dev/en/posts/cse-02-cloud-baseline-security/Cloud Security Baseline (CSB) is the minimum set of controls that must exist before the first workload deploys. Here's the practical breakdown — from CIS Benchmarks, drift detection, to automatically enforcing baseline.Thu, 02 Jul 2026 00:00:00 GMTcloudsecurityiamtoolingCloud Security Engineeringhttps://malay-tech-journal.pages.dev/en/posts/cse-01-skill-berubah/https://malay-tech-journal.pages.dev/en/posts/cse-01-skill-berubah/The role of cloud security engineer has changed more in 2 years than in the 5 years before. Here's an honest breakdown: what's stayed the same, what's changed, and what new skills you need now.Wed, 01 Jul 2026 00:00:00 GMTcloudsecurityiamtoolingCloud Security Engineeringhttps://malay-tech-journal.pages.dev/en/posts/malaysia-anak-muda-teknologi/https://malay-tech-journal.pages.dev/en/posts/malaysia-anak-muda-teknologi/Gen Z Malaysia is building, not just using. Cloud, AI, open source — talent is there, it's just quiet.Tue, 30 Jun 2026 00:00:00 GMTmetamalaysiacloudai