TL:DR: This is a Developing Situation and I will try to update it as we dissect more. If you’d prefer the remediation protocol directly, you can head to the bottom. In case you want to understand the anatomy of the attack and background, I have made a video that can be a quick explainer. The … Read more
The Promise Cloudflare’s outage did not just take down a fifth of the Internet. It exposed a truth we often avoid in engineering: complex systems rarely fail because of bad code. They fail because of the invisible assumptions we build into them. This piece cuts past the memes, the Rust blame game and the instant … Read more
It started innocently enough. Morning coffee, post-workout calm, a quick “Computer, drop in on my son.” Instead of his sleepy grin, I got the polite but dreaded: “There is an error. Please try again later.” -Alexa (i call it “Computer” as a wannabe Capt of NCC1701E) Moments later, I realised it wasn’t my internet or … Read more
Build Smarter, Ship Faster: Engineering Efficiency and Security with Pre-Commit In high-velocity engineering teams, the biggest bottlenecks aren’t always technical; they are organisational. Inconsistent code quality, wasted CI cycles, and preventable security leaks silently erode your delivery speed and reliability. This is where pre-commit transforms from a utility to a discipline. This guide unpacks how … Read more
Inside the Palantir Mafia: Recent Moves, New Players, and Unwritten Rules (Part 2: 2023–2025 Update) I. Introduction: The Palantir Mafia Evolves The “Palantir Mafia” has quietly become one of the most influential networks in the tech world, rivalling even the legendary PayPal Mafia. Since our last deep dive, this group of alumni from the data … Read more
Why Ending the CSRB Puts America at Risk Imagine dismantling your fire department just because you haven’t had a major fire recently. That’s effectively what the Trump administration has done by disbanding the Cyber Safety Review Board (CSRB), a critical entity within the Cybersecurity and Infrastructure Security Agency (CISA). In an era of escalating cyber … Read more
Recently, while attending The Business Show in London, I engaged in a conversation with a CXO of an upcoming Fintech company. The discussion began with cybersecurity implementation—a topic close to my heart—but quickly veered into the realm of engineering throughput. What followed was an incoherent rant by the CXO, a frustrating narrative about firing their … Read more
Disclaimer:This article is not intended to discredit Boris Denisov, Stanford University, McKinsey, or any other entities referenced herein. I hold immense respect for their contributions to research and industry discourse. While findings like these may resonate with practices in FAANG companies, large organizations, and mature startups, this critique seeks to explore the broader implications of … Read more
I recently read an interesting report by CyCognito on the top 3 vulnerabilities on third-party products and it sparked my interest to reexamine the supply chain risks in software engineering. This article is an attempt at that. The Vulnerability Trifecta in Third-Party Products The CyCognito report identifies three critical areas where third-party products introduce significant … Read more
Introduction The rapid growth of the fintech industry has brought with it immense opportunities for innovation, but also significant risks in terms of regulatory compliance and real security. Starling Bank, one of the UK’s prominent digital banks, recently faced a £29 million fine in October 2024 from the Financial Conduct Authority (FCA) for serious lapses … Read more