corpus.blog
41554 blogs · [ { "id": "01a087dd-c044-7156-8459-fe5a9cd192ba", "title": "🐝  🐜  🦋 The Secret Internet of Insects", "url": "https://securitysandman.com/2026/04/10/%f0%9f%90%9d-%f0%9f%90%9c-%f0%9f%a6%8bthe-secret-internet-of-insects/", "published_at": "2026-04-10T05:11:07+00:00" }, { "id": "01a087dd-c044-7156-8459-fe5a9ce19ac6", "title": "The Structural Conditions for Collective Intelligence", "url": "https://securitysandman.com/2026/04/04/the-structural-conditions-for-collective-intelligence/", "published_at": "2026-04-04T16:47:34+00:00" }, { "id": "01a087dd-c044-7156-8459-fe5a9cfd7c7c", "title": "Building Enterprise SSO for my multi-tenant SaaS AI Agent platform", "url": "https://securitysandman.com/2026/04/02/building-enterprise-sso-for-my-multi-tenant-saas-ai-agent-platform/", "published_at": "2026-04-02T07:31:16+00:00" }, { "id": "01a087dd-c044-7156-8459-fe5a9de07622", "title": "Mission-Critical IAM, Coding Agents and X-Agent Spec-Driven Collaboration", "url": "https://securitysandman.com/2026/03/29/exploring-ai-spec-development-for-sso-idp-auth-code-problems/", "published_at": "2026-03-29T15:49:02+00:00" }, { "id": "01a087dd-c044-7156-8459-fe5a9edc7d60", "title": "Kicking tires on “Spec” AI Development", "url": "https://securitysandman.com/2026/03/23/kicking-tires-on-spec-ai-development/", "published_at": "2026-03-24T03:31:36+00:00" }, { "id": "01a087dd-c044-7156-8459-fe5a9f51f7a7", "title": "Fresh Snow Outside, Fresh Threats Inside: Practical Agentic AI Hardening", "url": "https://securitysandman.com/2026/03/16/fresh-snow-outside-fresh-threats-inside-practical-agentic-ai-hardening/", "published_at": "2026-03-16T16:49:14+00:00" }, { "id": "01a087dd-c044-7156-8459-fe5a9fe95ea9", "title": "Your AI Agent Is The Attacker – Claude, OpenCode – Threats and Security Designs", "url": "https://securitysandman.com/2026/03/11/your-ai-agent-is-the-attacker-claude-opencode-threats-and-security-designs/", "published_at": "2026-03-12T03:22:58+00:00" }, { "id": "01a087dd-c044-7156-8459-fe5aa08cbfa9", "title": "Microsoft Ignite 2025: AI Security – tl;dr but RTFM", "url": "https://securitysandman.com/2025/12/09/microsoft-ignite-2025-cybersecurity-announcements-impact-analysis/", "published_at": "2025-12-10T00:16:26+00:00" }, { "id": "01a087dd-c044-7156-8459-fe5aa128d879", "title": "Seeing the AI-Security Forest Through the Trees", "url": "https://securitysandman.com/2025/11/04/seeing-the-ai-security-forest-through-the-trees/", "published_at": "2025-11-04T06:01:33+00:00" }, { "id": "01a087dd-c044-7156-8459-fe5aa15ebf15", "title": "Is Claude Code Secure? Let’s Find Out!", "url": "https://securitysandman.com/2025/10/26/is-claude-code-secure-lets-find-out/", "published_at": "2025-10-26T22:22:26+00:00" }, { "id": "01a0bdfd-a3d4-722c-af89-05a129fdcb9e", "title": "Anthropic’s Security Layers Explained: The Good, Bad & Ugly", "url": "https://securitysandman.com/2025/10/24/anthropics-security-layers-explained-what-you-lose-on-basic-plans-and-what-you-gain-at-enterprise/", "published_at": "2025-10-24T15:45:18+00:00" }, { "id": "01a0bdfd-a3d5-7127-8633-0344e34ad065", "title": "AI RED TEAMING – man-in-the-vector Attack & custom Tooling", "url": "https://securitysandman.com/2025/07/31/ai-red-teaming-man-in-the-vector-attack-custom-tooling/", "published_at": "2025-07-31T16:27:27+00:00" }, { "id": "01a0bdfd-a3d5-7127-8633-0344e3a4b0d3", "title": "Vector Drift, Prompt Injection, and the Hidden RAG Attack Surface", "url": "https://securitysandman.com/2025/06/10/vector-drift-prompt-injection-and-the-hidden-ai-rag-attack-surface/", "published_at": "2025-06-10T18:38:32+00:00" }, { "id": "01a0bdfd-a3d5-7127-8633-0344e3f8199b", "title": "Chaos, Complexity, and the Hidden Structure of Hash Functions in Proof-of-Work", "url": "https://securitysandman.com/2025/06/07/chaos-complexity-and-the-hidden-structure-of-hash-functions-in-proof-of-work/", "published_at": "2025-06-07T17:22:39+00:00" }, { "id": "01a0bdfd-a3d5-7127-8633-0344e43dd852", "title": "Cooking with AI Agents: A Security Architect’s Guide to AI Threat Modeling & Design", "url": "https://securitysandman.com/2025/06/02/a-security-architects-guide-to-threat-modeling-ai-agent-design/", "published_at": "2025-06-02T06:35:24+00:00" }, { "id": "01a0bdfd-a3d5-7127-8633-0344e46b06b4", "title": "Breaches Cost Millions! Build AI Detections from NHI + Network logs", "url": "https://securitysandman.com/2025/02/09/breaches-cost-you-millions-build-ai-detection-capabilities/", "published_at": "2025-02-10T02:32:27+00:00" }, { "id": "01a0bdfd-a3d5-7127-8633-0344e4ac1fbe", "title": "From Known to Unknown: Shifting Cybersecurity to Proactive AI Detection", "url": "https://securitysandman.com/2025/01/06/from-known-to-unknown-shifting-cybersecurity-to-proactive-ai-detection/", "published_at": "2025-01-07T02:20:53+00:00" }, { "id": "01a0bdfd-a3d5-7127-8633-0344e567990e", "title": "training ai to Predict your competitor’s next …", "url": "https://securitysandman.com/2024/11/03/training-ai-to-predict-your-competitors-next/", "published_at": "2024-11-03T23:47:20+00:00" }, { "id": "01a0bdfd-a3d5-7127-8633-0344e5d33a1f", "title": "Abusing AI for Password Guessing and social engineering", "url": "https://securitysandman.com/2024/10/11/abusing-ai-for-password-guessing-and-social-engineering/", "published_at": "2024-10-11T23:24:46+00:00" }, { "id": "01a0bdfd-a3d5-7127-8633-0344e697de84", "title": "CHANGE HEALTHCARE: ITS LITERALLY IN THE NAME", "url": "https://securitysandman.com/2024/02/29/change-healthcare-its-literally-in-the-name/", "published_at": "2024-03-01T02:36:28+00:00" }, { "id": "01a0be06-5eae-704c-bd12-c790be683adb", "title": "IAM – Okta MFA + AD + OIDC & VAULT", "url": "https://securitysandman.com/2022/02/21/end2end-okta-ad-oidc-vault/", "published_at": "2022-02-21T21:36:05+00:00" }, { "id": "01a0be06-5eae-704c-bd12-c790bf42df9b", "title": "DEVSEC – protecting cicd with yubikey protected ssh keys", "url": "https://securitysandman.com/2022/02/08/appdec-protecting-cicd-with-yubikey-protected-ssh-keys/", "published_at": "2022-02-08T14:28:36+00:00" }, { "id": "01a0be06-5eae-704c-bd12-c790bfea3cb0", "title": "DETECT/IR – automating aws guard-duty with terraform", "url": "https://securitysandman.com/2022/02/06/automating-aws-guard-duty-with-terraform/", "published_at": "2022-02-06T22:37:37+00:00" }, { "id": "01a0be06-5eae-704c-bd12-c790c05c5148", "title": "CLOUDSEC – Hey CLOUD PROVIDERS! FIX THIS insecure secrets mgmt trend", "url": "https://securitysandman.com/2022/02/02/psa-cloud-providers-fix-this-insecure-secrets-mgmt-trend/", "published_at": "2022-02-03T03:31:00+00:00" }, { "id": "01a0be06-5eae-704c-bd12-c790c073fd9b", "title": "APPSEC – PWNKIT – CVE-2021-4034", "url": "https://securitysandman.com/2022/01/27/appsec-pwnkit-cve-2021-4034/", "published_at": "2022-01-27T15:15:07+00:00" }, { "id": "01a0be06-5eae-704c-bd12-c790c149f6ce", "title": "CLOUDSEC – Azure App Service – Cool feature or dangerous back channel ?", "url": "https://securitysandman.com/2021/09/12/azure-app-service-cool-feature-or-dangerous-back-channel/", "published_at": "2021-09-12T22:41:00+00:00" }, { "id": "01a0be06-5eae-704c-bd12-c790c22b0cc5", "title": "DEVSEC – Mitigating supply chain software attacks with Yubikey signed GIT commits (sort-of)", "url": "https://securitysandman.com/2021/09/02/devsec-mitigating-supply-chain-software-attacks-with-yubikey-signed-git-commits-sort-of/", "published_at": "2021-09-02T19:20:07+00:00" }, { "id": "01a0be06-5eae-704c-bd12-c790c23f32c2", "title": "GAMESEC – CD Projekt Red – Packet Analysis for Malware on Xbox one X", "url": "https://securitysandman.com/2021/08/28/cd-projekt-red-packet-analysis-for-malware-on-xbox-one-x/", "published_at": "2021-08-28T21:01:16+00:00" }, { "id": "01a0be06-5eae-704c-bd12-c790c31e77b1", "title": "CLOUDSEC – Retroactively Tag Assets – Lamba Scripts", "url": "https://securitysandman.com/2021/08/22/cloudsec-retroactively-tag-assets-lamba-scripts/", "published_at": "2021-08-22T15:14:00+00:00" }, { "id": "01a0be06-5eae-704c-bd12-c790c3b2f6fe", "title": "NETSEC – Detecting unusual traffic in the Cloud using Flowlogs/Lambdas", "url": "https://securitysandman.com/2021/08/21/netsec-detecting-unusual-traffic-in-the-cloud-using-flowlogs-lambdas/", "published_at": "2021-08-21T14:55:00+00:00" }, { "id": "01a0be12-7449-7092-afb1-e12ce1509199", "title": "OFFSEC – Pen-testing Azure Firewall IDPS & Threat Intel features (Azure Lab 2)", "url": "https://securitysandman.com/2021/07/31/pen-testing-azure-firewall-idps-threat-intel-features-azure-lab-2/", "published_at": "2021-08-01T00:05:59+00:00" }, { "id": "01a0be12-7449-7092-afb1-e12ce1f68be1", "title": "CLOUDSEC – Securing Cloud Networks with Hub-N-Spoke and Azure Firewall (Azure Lab 1)", "url": "https://securitysandman.com/2021/07/23/securing-cloud-networks-with-hub-n-spoke-and-azure-firewall-lab-1/", "published_at": "2021-07-23T21:34:47+00:00" }, { "id": "01a0be12-7449-7092-afb1-e12ce220c049", "title": "CLOUDSEC – Public Cloud Web Shells …. a serious malware and DLP issue", "url": "https://securitysandman.com/2021/04/28/public-cloud-web-shells-a-serious-malware-and-dlp-issue/", "published_at": "2021-04-28T21:53:49+00:00" }, { "id": "01a0be12-7449-7092-afb1-e12ce289c1d7", "title": "APPSEC – How to compromise Kubernetes – Full Red Team vs Blue Team demo", "url": "https://securitysandman.com/2021/04/20/how-to-compromise-kubernetes-full-red-team-vs-blue-team-demo/", "published_at": "2021-04-21T02:31:36+00:00" }, { "id": "01a0be12-7449-7092-afb1-e12ce31f138a", "title": "APPSEC – AWS Amplify+React XSS attacks against AWS localStorage vulnerabilities", "url": "https://securitysandman.com/2021/04/12/example-post-3/", "published_at": "2021-04-12T19:00:46+00:00" }, { "id": "01a0be12-7449-7092-afb1-e12ce3418b7f", "title": "DETECT – Detecting IOCs on Kubernetes for fun and profit", "url": "https://securitysandman.com/2021/04/12/falco-ioc-detection-on-k8-wip/", "published_at": "2021-04-12T19:00:03+00:00" }, { "id": "01a0be12-7449-7092-afb1-e12ce393a421", "title": "OFFSEC – Writing Buffer Overflows and Reverse Engineering compiled binaries", "url": "https://securitysandman.com/2021/04/04/writing-buffer-overflows-and-reverse-engineering-compiled-binaries/", "published_at": "2021-04-05T04:22:11+00:00" }, { "id": "01a0be12-7449-7092-afb1-e12ce515ef16", "title": "OFFSEC – Writing Node.js malware that steals your cloud access keys", "url": "https://securitysandman.com/2021/04/04/example-post/", "published_at": "2021-04-04T21:43:44+00:00" }, { "id": "01a0be12-7449-7092-afb1-e12ce42f29d1", "title": "PROTECT – Why & How to build Client-Side Encryption in React.Js and beyond", "url": "https://securitysandman.com/2021/04/04/example-post-2/", "published_at": "2021-04-04T16:43:45+00:00" }, { "id": "01a0be12-7449-7092-afb1-e12ce58a4a1a", "title": "NETSEC – You’re leaking to public Cloud APIs and all you can do is …", "url": "https://securitysandman.com/2021/04/01/youre-leaking-to-public-cloud-apis/", "published_at": "2021-04-01T21:34:06+00:00" } ] posts Claim your blog
Back to securitysandman.com
Blog · corpus.blog/blogs/securitysandman.com/posts

securitysandman.com

securitysandman.com

2026

🐝  🐜  🦋 The Secret Internet of Insectsoriginal ↗
10 Apr 2026
The Structural Conditions for Collective Intelligenceoriginal ↗
4 Apr 2026
Building Enterprise SSO for my multi-tenant SaaS AI Agent platformoriginal ↗
2 Apr 2026
Mission-Critical IAM, Coding Agents and X-Agent Spec-Driven Collaborationoriginal ↗
29 Mar 2026
Kicking tires on “Spec” AI Developmentoriginal ↗
24 Mar 2026
Fresh Snow Outside, Fresh Threats Inside: Practical Agentic AI Hardeningoriginal ↗
16 Mar 2026
Your AI Agent Is The Attacker – Claude, OpenCode – Threats and Security Designsoriginal ↗
12 Mar 2026

2025

Microsoft Ignite 2025: AI Security – tl;dr but RTFMoriginal ↗
10 Dec 2025
Seeing the AI-Security Forest Through the Treesoriginal ↗
4 Nov 2025
Is Claude Code Secure? Let’s Find Out!original ↗
26 Oct 2025
Anthropic’s Security Layers Explained: The Good, Bad & Uglyoriginal ↗
24 Oct 2025
AI RED TEAMING – man-in-the-vector Attack & custom Toolingoriginal ↗
31 Jul 2025
Vector Drift, Prompt Injection, and the Hidden RAG Attack Surfaceoriginal ↗
10 Jun 2025
Chaos, Complexity, and the Hidden Structure of Hash Functions in Proof-of-Workoriginal ↗
7 Jun 2025
Cooking with AI Agents: A Security Architect’s Guide to AI Threat Modeling & Designoriginal ↗
2 Jun 2025
Breaches Cost Millions! Build AI Detections from NHI + Network logsoriginal ↗
10 Feb 2025
From Known to Unknown: Shifting Cybersecurity to Proactive AI Detectionoriginal ↗
7 Jan 2025

2024

training ai to Predict your competitor’s next …original ↗
3 Nov 2024
Abusing AI for Password Guessing and social engineeringoriginal ↗
11 Oct 2024
CHANGE HEALTHCARE: ITS LITERALLY IN THE NAMEoriginal ↗
1 Mar 2024

2022

IAM – Okta MFA + AD + OIDC & VAULToriginal ↗
21 Feb 2022
DEVSEC – protecting cicd with yubikey protected ssh keysoriginal ↗
8 Feb 2022
DETECT/IR – automating aws guard-duty with terraformoriginal ↗
6 Feb 2022
CLOUDSEC – Hey CLOUD PROVIDERS! FIX THIS insecure secrets mgmt trendoriginal ↗
3 Feb 2022
APPSEC – PWNKIT – CVE-2021-4034original ↗
27 Jan 2022

2021

CLOUDSEC – Azure App Service – Cool feature or dangerous back channel ?original ↗
12 Sept 2021
DEVSEC – Mitigating supply chain software attacks with Yubikey signed GIT commits (sort-of)original ↗
2 Sept 2021
GAMESEC – CD Projekt Red – Packet Analysis for Malware on Xbox one Xoriginal ↗
28 Aug 2021
CLOUDSEC – Retroactively Tag Assets – Lamba Scriptsoriginal ↗
22 Aug 2021
NETSEC – Detecting unusual traffic in the Cloud using Flowlogs/Lambdasoriginal ↗
21 Aug 2021
OFFSEC – Pen-testing Azure Firewall IDPS & Threat Intel features (Azure Lab 2)original ↗
1 Aug 2021
CLOUDSEC – Securing Cloud Networks with Hub-N-Spoke and Azure Firewall (Azure Lab 1)original ↗
23 Jul 2021
CLOUDSEC – Public Cloud Web Shells …. a serious malware and DLP issueoriginal ↗
28 Apr 2021
APPSEC – How to compromise Kubernetes – Full Red Team vs Blue Team demooriginal ↗
21 Apr 2021
APPSEC – AWS Amplify+React XSS attacks against AWS localStorage vulnerabilitiesoriginal ↗
12 Apr 2021
DETECT – Detecting IOCs on Kubernetes for fun and profitoriginal ↗
12 Apr 2021
OFFSEC – Writing Buffer Overflows and Reverse Engineering compiled binariesoriginal ↗
5 Apr 2021
OFFSEC – Writing Node.js malware that steals your cloud access keysoriginal ↗
4 Apr 2021
PROTECT – Why & How to build Client-Side Encryption in React.Js and beyondoriginal ↗
4 Apr 2021
NETSEC – You’re leaking to public Cloud APIs and all you can do is …original ↗
1 Apr 2021