Security / Engineering / Perspective
The Security
Thread.
By Shanmugam Loganathan
Connecting the dots across AppSec, cybersecurity, and AI security.
2026-11-06
My View on AI-assisted credential theft, prompt injection, authorized cyber tooling, and what WordPress and Keycloak fixes should prove in production.
- Microsoft observed agentic tooling turn exposed secrets into cloud access.
- A web agent prototype separates planning from untrusted page content.
- Stronger cyber models make scoped access and reproducible evidence more important.
Read the full article ↗2026-10-30
My perspective on independent AI review, agent boundaries, scoped assurance, and verified remediation—five items connecting this week’s research with last week’s open questions.
- Human approval needs independent reasoning, not just agreement with an agent.
- Agent boundaries and AI-assisted assurance need evidence beyond convincing output.
- Runtime fixes and trust updates still require verification in deployed systems.
Read the full article ↗2026-10-23
Introducing my weekly perspective on application security, DevSecOps, and AI security: practical observations and questions for engineering leaders.
- What developments mean for application and engineering teams.
- How to connect security findings with practical remediation.
- Where AI can support security work, and where scrutiny matters.
Read the full article ↗2026-10-23
This week’s PHP and Node.js updates, Mozilla’s certificate response, and my perspective on connecting vulnerability discovery to verified remediation.
- PHP’s critical security release puts runtime ownership and upgrade readiness in focus.
- Node.js updates reinforce the need to track what is deployed beneath application code.
- Mozilla’s certificate response shows why trust-store maintenance belongs in security planning.
Read the full article ↗