Blog
Write-ups and case studies from my security labs and projects.
Cybersecurity, Artificial Intelligence, Developer ToolsPostman AI Plugins: Audit What Your Dev Tools Install
A Postman desktop upgrade was reported to add plugins, hooks and an MCP server to developers' AI coding agents without a clear prompt. Here is what was actually shown, and a practical routine for auditing what your tools install.
Cybersecurity, Artificial Intelligence, Developer ToolsAI Coding Agent Plugin Security: Lessons from Postman
A developer reported that the Postman desktop app quietly installed plugins and a startup hook into Codex and Claude Code. Here is what was claimed, what Postman has said, and how to audit your own AI agent configuration.
Cybersecurity, Web Development, Game DevelopmenteMudhra CA Compromise: Is Your App's Trust Store Patched?
Browsers blocked the compromised eMudhra certificates within hours, but apps that carry their own trust store needed their own fix. Here is what changed for Unity, Go, Node.js and PHP, and a checklist to keep your trust store current.
Cybersecurity, Game Development, UnityUnity Security Update: What the eMudhra Breach Means
A certificate authority's weak keys left non-browser software trusting revoked certificates, and Unity games were among them. Here is what is affected, what to patch and how to avoid the same blind spot next time.
Game Development, Unreal Engine, Web DevelopmentUnreal Engine 5.9 Web Target: How to Get Your Game Ready
Epic says Unreal Engine 5.9 arrives in Preview next week, with web returning as a target platform. Here is what is confirmed, and a practical checklist to get your project ready for browser builds.
Game Development, Unity, C#How to Prepare Your Unity 6 Project for Unity 7
Unity says moving to Unity 7 will need zero rebuilding, with a Preview due in December. Here is what that promise covers, what it cannot, and a practical checklist to get your Unity 6 project ready now.
Cybersecurity, PHP, Web DevelopmentPHP Security Update: Patch the October 2026 RCE Flaws
The PHP project has fixed two critical flaws that can allow unauthenticated remote code execution on almost any PHP web server. Here is who is affected, which versions to install and a practical plan for patching safely.
Personal BrandCombining AI, Cybersecurity and Game Development in One Brand
A focused way to connect multiple skills without making the website feel confusing.
PortfolioWhy Case Studies Make Projects Look More Professional
Why project detail pages should explain process, challenges and outcomes instead of only showing images.
CareerBuilding a Portfolio That Shows Both Technical and Creative Skill
A short article about presenting AI, cybersecurity, web, game and creative work inside one professional brand.
Nothing matches. Try another filter or search.