/blog · category
Security
Identity, least privilege, threat modeling, data safety, and supply-chain risk.
Posts
2025-05-16
Security
When Letters Lie: Analyzing a Typical IDN Homograph Attack
A client forwarded a suspicious security update email. The domain looked right. Character by character, it was not.
7 min
2025-04-08
Security
Owning your dependency supply chain
Auditing a dependency tells you about the version you read. It says nothing about the one being published tonight.
4 min
2024-06-28
Security
Ongoing Supply Chain Attack on WordPress.org Plugin Repository
Infected versions of legitimate plugins, published under their own names, reaching every site set to update automatically.
2 min