Notes
Cloud & AI security, written down
Short, practical write-ups behind the videos and posts. Real incidents, what went wrong, and the exact fix. Every claim links to its source.
5 AWS settings attackers hope you skipped (10-minute check)
Five account-level AWS settings that close the most common doors: S3 Block Public Access, IMDSv2 by default, root MFA, an all-Region CloudTrail trail and IAM Access Analyzer.
Leaked an AWS key on GitHub? Here's what happens in the first 5 minutes
Attackers found and used exposed AWS keys within five minutes in one real campaign. What they did, what AWS does automatically, and the 6 steps to take right now.
Prompt injection for cloud teams: 6 real AI agent hijacks and the 5 fixes
An AI agent can't reliably tell data from instructions. Six real attacks shown by researchers (logs, forms, PDFs, GitHub issues, email, browser extensions) and the controls that stop all of them.
Get the free checklist
Enter your email and the full PDF lands in your inbox in a minute. Plus a short note when a new video is out. No spam. Unsubscribe anytime.
We'll only use your email to send the checklist and new-video notes. See the privacy policy.