Background
Who I am
I'm a System Engineer and IAM (Identity & Access Management) Engineer. My work centers on designing and hardening infrastructure, identity systems, and access controls so that the right people and systems get the right access — and nothing more.
On the backend, I spend most of my time in Entra ID, Okta, AWS IAM, and custom IdP integrations — writing policies, auditing access, and building zero trust frameworks that actually hold up under pressure. I automate everything with Terraform, Python, and PowerShell because manual processes don't scale and they breed drift.
On iOS, I build tools like Autheris — a secure 2FA token manager that lives entirely on-device. The goal is to take the same security principles I apply to cloud infrastructure and make them practical in the palm of your hand. This site is where I showcase those projects and point to their dedicated pages. When I'm not building, I write about IAM hardening, authentication patterns, and threat intelligence on the blog.
Latest
Recent posts
Security research, technical deep-dives, and threat intelligence. View all posts →
Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents
A single invisible HTML comment in an Azure DevOps pull request can hijack a reviewer's AI coding agent, driving it into projects the attacker cannot access and leaking source code, secrets, and work items. Microsoft's official MCP server missed a guardrail.
HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050
A new espionage implant uses Microsoft 365 calendar events dated 2050 as a command channel. HollowGraph hides operator instructions and exfiltrates stolen data through legitimate Graph API traffic, making it invisible to network controls.
Hugging Face Breached by an Autonomous AI Agent
The world's largest AI model repository was compromised by an autonomous AI agent system. The attackers used a malicious dataset to gain code execution, then deployed LLM-powered agents that executed thousands of actions across sandboxes with self-migrating C2 infrastructure.