There’s now a Cyber Weapon Index

Apparently AI models are weapons now and they’re going to kill us all (but that’s a different post)

11 hrs ago • Adrian Sanabria

1

Breach Lessons: the Capital One Breach

Cloud security lessons for the ages

Sep 15 • Adrian Sanabria and Vladimir Serov

2

Breach Lessons: the 2023 British Library Breach

More than just a library - a computer museum that was also powering the library’s infrastructure

Sep 2 • Vladimir Serov and Adrian Sanabria

August 2026

Reviewing initial research on using AI for vulnerability remediation

TL;DR: don't use AI to create patches

Aug 11 • Adrian Sanabria

2

July 2026

I vibe-coded an app for my Pebble watch and it made me sad

I had the opposite reaction to vibe-coding a website, and I think I know why

Jul 13 • Adrian Sanabria

1

1

Signs of hope for Secure by Design

Finally, some potential incentives!

Jul 1 • Adrian Sanabria

2

June 2026

(re)Defining Zero-Day

A vendor patch shouldn’t be part of the definition

Jun 8

2

The unintended consequences of vulnmaxxing

The only way to fix vulns at AI scale is to use AI. Coincidence or cash grab?

Jun 2 • Adrian Sanabria

3

3

May 2026

Verizon's 19th edition of the DBIR confirms the vulnpocalypse***

But with many asterisks! Read on to find out why 😅

May 19 • Adrian Sanabria

3

2

TALK: How Breaches Happen

Delivered at Chicago ISSA's Spring 2026 Meeting

May 9 • Adrian Sanabria

1

1

1

The Destroyed by Breach project now has a website

Finally, after existing as a Google Sheet for nearly a decade

May 4 • Adrian Sanabria

2

3

April 2026

A tale of two privilege escalation bugs

Why Copy Fail is a bigger deal than PhantomRPC

Apr 30 • Adrian Sanabria

1

3