Cyber SecurityBeginner
Browser Extension Permissions: Decide What Deserves Access
Review an extension’s purpose, publisher and permissions; limit site access where supported, test with harmless data, and remove unnecessary add-ons.
IoTDeep Dive
MQTT Security: Authentication Is Not Topic Authorization
Design MQTT permissions around publish and subscribe actions, test cross-device access and retained-message behavior, and avoid shared administrator credentials.
IoTIntermediate
Thread Border Routers: Connectivity Is Not Your Whole Security Policy
Understand Thread border-router connectivity, IPv6 and service discovery, then review network segmentation without breaking legitimate smart-home control.
IoTIntermediate
Matter Multi-Admin Security: Remove Access Across Ecosystems
Review Matter device access across home apps, controllers and vendor accounts, with a safe handover checklist for guests, housemates and ownership changes.
Artificial intelligenceDeep Dive
AI Agent Actions: Budgets, Approvals and a Working Stop Button
Constrain an AI agent’s actions with server-side limits, parameter-bound approvals, idempotent execution and cancellation tests for queued work.
Artificial intelligenceDeep Dive
MCP Authorization in 2026: Tokens, Audiences and Trust Boundaries
Review HTTP-based MCP authorization against the July 2026 specification, with audience checks, separate downstream grants and safe metadata handling.
Artificial intelligenceDeep Dive
RAG Authorization: Keep One Customer’s Data Out of Another’s Answer
Design and test document-level authorization for multi-tenant RAG systems, including retrieval filters, permission changes, caches and source citations.
Cyber SecurityDeep Dive
Workload Identity Federation: Retire Long-Lived Service Keys
Map service accounts, constrain federated identity claims and test negative cases before replacing a stored deployment key with short-lived credentials.
Cyber SecurityIntermediate
OAuth App Consent: Review Permissions and Revoke Access
Audit connected applications by publisher, permissions, data access and owner. Plan a safe consent review and verify what revocation actually removes.
Cyber SecurityIntermediate
VPN vs Zero Trust: How to Evaluate Remote Access
A protected network connection and permission to use an application solve different problems. Evaluate remote access through a bounded pilot with clear allowed and denied actions.