Banking Technology & Cybersecurity: Real-World Engineering
Fraud systems, payments engineering, banking malware, and what building secure financial technology looks like inside one of Africas largest retail banks.
Fighting the Swarm: Why Deception Deserves a Bigger Role in Detection
This is a companion to Decoys as Zero Day Sensors: Deception, Isolation and Early Signal, which argued that decoys are good at exposing unknown exploits because they have no legitimate business purpose. This post applies that idea to a new kind of attacker. AI swarms exploit ordinary weaknesses through broad, persistent exploration, and well placed […]
Read more →
Root of Trust: Fix the Business Process Before You Bypass the Security
Picture a business process that reaches the point where a customer must approve something important, where the intended control is an approval through their banking app, but the app has not yet been activated. Someone suggests sending an SMS instead so that the process can continue, and in the moment this sounds like a perfectly […]
Read more →
One Wallet, One Premium: Rebuilding Credit Around the Client Instead of the Product
There is an asymmetry sitting in plain sight in every retail lending book, and once you notice it you cannot unsee it. Some of the smallest, shortest and most frequently repaid advances we write exhibit extraordinarily low losses, particularly where repayment is tied closely to the customer’s income stream, and yet almost the entire architecture […]
Read more →
Defender for Linux vs Windows: Why One Size Fits All Cybersecurity Fails
A practical look at endpoint detection and response on Linux servers, containers and Kubernetes, and why the decision should start with the workload and its residual risk rather than a uniform coverage target. 1. When Did Linux Become Windows? Security standards tend to be written for one operating model and then applied, with very little […]
Read more →