Cloud security architect at a Dubai fintech, specialising in zero-trust network design on GCP. Designed the IAM framework now adopted as the company's security baseline across all products.
OAuth 2.0 is well-specified but frequently misimplemented. The mistakes that expose user accounts are not obscure — they are common implementation shortcuts that skip required security checks.
21 July 2026
npm projects have hundreds of transitive dependencies from dozens of authors. Each dependency is a potential attack vector. The practices that reduce supply chain risk are not onerous — most can be added to an existing project in a day.
20 July 2026