(Automated) Vulnerability Analysis is Hard

A practical look at machine-learning malware traffic detection and the assumptions defenders inherit when models are applied to encrypted communications.

A reverse-engineering note on extracting useful signal from .NET malware by programmatically recovering strings and analyst context.

A practical cloud security note about recurring implementation failure modes, passwords, providers, exposure, and the assumptions teams keep rediscovering.