Work & Life Notes

follow: @[email protected]

Posts

Building HBOM for a Router

Component Hashes in SBOMs

It’s 2026. It’s faster to fix CVEs than argue about them

The IDE is Now Just a Large Attack Surface

CI/CD Security Principles in 2026

The last line of defense must not be AI

ReARM: Governing AI Coding Agents Demo

New ReARM Pitch – Governance for Agentic Coding

When the Paradigm Shifts: A Zero-Trust Model for AI Agents

Talked about QA and Cyber Security at OnPod

Time to Start Treating Dev Machines as Untrusted

Want to Survive Current Tech Era – Learn to Be a Good QA

Towards Perfect Vulnerability Management System

SBOM Developments for December 2025

My TEA Talk from OWASP 2025 Global AppSec USA

How to Use ReARM to Check if Shai-Hulud 2.0 Infiltrated Your Dependencies (video)

My Talk on TEA at KubeCon NA 2025 Pre-event

ReARM Demo Video for SecTor 2025 Arsenal

SBOM Diffing: Next Frontier for Supply Chain Security

AI Proof Businesses

My Talk on TEA at BSides Toronto

npm Has Become a Russian Roulette

SBOM Developments for July 2025

Combinatorial Explosion of Versions 5 Years Later

Why “Dynamic SBOM” is a Misconception

ReARM Now Supports Transparency Exchange API

Why New Generation of SBOM Tools Matters

SBOM – Not So Static After All

Practical Guide to NTIA Compliant SBOM

ReARM xBOM Manager is now Available