2025 Wrapped

Blog post about 2025 Wrap & Reflection

Some thoughts around Django SQL Injection CVE-2025-64459

Some thoughts around Django SQL Injection CVE-2025-64459

Claude Code for Security Analysis: Introducing SecureFlow CLI to Hunt Security Vulnerabilities

AI-powered security scanning tool using agentic loops to hunt vulnerabilities - discovered 300+ issues in WordPress plugins with 12+ AI model support and DefectDojo integration.

Exploring fun parts of Neural Network

Purely exploration blog post and thoughts around neural network

Rethinking MCP or Tool Calling Through Permission Based System

Explore a permission-based security model for MCP and Tool Calling in LLMs, inspired by Android's runtime permissions, to protect sensitive data while maintaining functionality.

Static Analysis Isn't Enough: Understanding Library Interactions for Effective Data Flow Tracking

Static analysis tools go blind without understanding library calls – learn why modeling them is critical for finding real security flaws.

Lessons from Building Sherlock: Automating Security Code Reviews with Sourcegraph

Explore how Sherlock leverages Sourcegraph to automate security code reviews, enhancing productivity and ensuring robust code security.

LLM-Powered Security Reviews: Insights and Challenges

Exploring the potential and challenges of LLM-assisted security reviews

How I Use AI to Streamline/Assist My Work

A short blog post on how I leverage LLMs (AI) to streamline or assist my work

2024 Wrapped

Blog post about 2024 Wrap & Reflection