Corporate DEI became a kind of spell. It was repeated in annual reports and all-hands meetings, pinned to office walls, and whispered as proof that an organization possessed a conscience. But somewhere between the town-hall slide deck and the social-media banner, it lost its substance. Now, as the political climate
Threat modelling is frequently discussed as if it were a singular, monolithic exercise. In reality, applying a one-size-fits-all methodology across diverse engineering and cyber-physical boundaries usually results in misallocated resources, frustrated development teams, and defensive gaps that miss the operational reality of the architecture. This guide serves as a practical
A brief logging event to mark a significant professional milestone. I was incredibly honored to be shortlisted as a finalist for the Outstanding Security Researcher/Analyst Award at this year’s Security Excellence Awards at One Moorgate Place. While I didn't bring home the physical trophy this time,
When a supplier delivers a component implementing complex cryptographic functions, a standard black-box penetration test is entirely insufficient to prove security. Navigating third-party validation requires a structured, evidence-based assurance framework. This piece outlines how automotive and industrial OEMs can design pre-sales and scoping phases to explicitly uncover and verify structural
While the Euro 7 standard is widely discussed in the media as a final tightening of automotive tailpipe emissions, its implications for software engineering and cybersecurity are far more disruptive. For the first time, regulatory frameworks are introducing explicit, aggressive mandates targeting software anti-tampering measures. This effectively bridges the gap
There is a strange role that trans people often get handed whether we asked for it or not. The walking symbol. The living lesson. The person who is apparently always giving feedback, always “making it political”, always “too sensitive” or “too demanding”. The Angry Trans Totem that certain corners of
I’ve published a new article for NCC Group’s Research Blog titled “Legacy Technology in Transport: More Than ‘Old Tech’”. You can read it here: 👉 Legacy Technology in Transport — NCC Group Research Blog
I’ve written a new piece for NCC Group’s Research Blog on how goal-based regulation is changing the way we think about cybersecurity assurance — moving from prescriptive checklists to defensible reasoning about what “secure enough” really means. You can read it here: 👉 Goal-Based Regulation — NCC Group Research Blog
I heard someone complaining about two-tier policing the other day, as if it is a modern phenomenon. They were frustrated at their belief that “the left get away with things the right do not.” But in my own communities, the opposite frustration is just as common. That made me want
There are many reasons to fly a flag and many places where flags have been flown throughout history. They have been used as signifiers of armies on battlefields, as indications of allegiance or ownership of towns and cities. They have also been used to trick unwitting mariners into slowing or
When you think of classic hacking imagery—dial tones, terminal prompts, the chirp of modems connecting—there’s a certain retro-tech romance that lingers. But beneath that nostalgia lies deep technical complexity, especially when it comes to the weird and wonderful world of USB. I'm a cybersecurity consultant
I am a lady of many opinions... To the point where it is a joke among my colleagues and myself that pigs will fly if I don't chime in on a conversation where there is no clear answer. It is important to highlight that I am no contrarian,
Planning TTRPGs Around ASC ∧ ADHD: A Campaign Format I Hope Will Work I love tabletop roleplaying games. I love the creativity, the collaborative storytelling, the improvised weirdness of fantasy characters trying to solve even weirder problems. But I also have a brain that doesn’t always cooperate. I’m autistic—