Cybersecurity articles

Editorial library

Published articles

Article · 4 min read

Security telemetry must connect agent identity, tool requests, authorization decisions, resource effects, and recovery—not just model latency.

Article · 4 min read

An agent's effective authority spans identity, delegation, tools, credentials, policies, resources, and downstream effects—not its prompt alone.

Article · 4 min read

Prompt injection manipulates model behavior; authorization, mediation, and resource reach determine whether manipulation becomes a harmful action.

Article · 5 min read

GitHub OIDC eliminates stored AWS access keys, but workflow claims, role trust, session permissions, and resource reach still define risk.

Article · 4 min read

A zero-finding scan is uninterpretable unless the scanner records what it analyzed, skipped, could not build, and does not support.

Article · 4 min read

Repository findings become more actionable when connected to identities, credentials, policies, resources, data, and reachable effects.

Article · 5 min read

Use CVSS as severity evidence—not a remediation order—by adding exploitation, exposure, business context, and control evidence.

Article · 4 min read

A source URL is not provenance. Useful intelligence preserves record identity, version, retrieval, claim scope, transformations, and uncertainty.

Article · 4 min read

A useful cryptographic inventory connects algorithms to libraries, protocols, keys, certificates, data, owners, and replacement constraints.

Article · 4 min read

Effective AWS authority depends on principal, action, resource, context, and every applicable policy—not the visible wildcard count alone.