August 2025
- How Microsoft Code Signing Became Part of a Trust Subversion Toolchain
Code signing was supposed to tell you who published a piece of software and ultimately decide if you can trust the software and install it.. For nearly three decades, cryptographic signatures have bound a binary to a…
- From Persistent to Ephemeral: Why AI Agents Need Fresh Identity for Every Mission
My wife and I went on a date night the other day and saw a movie, in the previews, I saw they're making a new Tron. It got me thinking about one of my favorite analogies, we recognized early that browsers are agents of…
- Talent Isn't a Security Strategy
One of the best parts of Black Hat is the hallway track. Catching up with friends you've known for years, swapping war stories, and pointing each other toward the talks worth seeing. This year I met up with a friend who,…
- History Doesn't Repeat, But It Rhymes: The AI Panic Edition
When my parents were young, the message was simple. Do not have too many kids. By the 1980s, they were told, the world would be out of food. The oceans would be empty, the fields barren, and billions would starve.