Adan – Medium

Adan

Pinned

Cybersecurity — It’s All About Trust

Last year, I wrote about the importance of understanding risks in cybersecurity and the critical role of risk reduction. Recently, I’ve…

Dec 30, 2023

Cybersecurity — It’s All About Trust

Dec 30, 2023

Writing, Receiving, Reviewing: My Take on Penetration Test Reports

A penetration test report can build trust or destroy it.

Sep 21

Writing, Receiving, Reviewing: My Take on Penetration Test Reports

Sep 21

GPT-5 vs Gemini Pro 2.5 vs Sonnet 4: Detecting Simple Vulnerabilities

Testing how GPT-5, Gemini Pro 2.5, and Sonnet 4 handle basic security flaws

Aug 17

GPT-5 vs Gemini Pro 2.5 vs Sonnet 4: Detecting Simple Vulnerabilities

Aug 17

API Keys for Bedrock: A Brief Security Overview

Bedrock now supports API keys. This post explores how they work and what security teams need to know.

Jul 13

API Keys for Bedrock: A Brief Security Overview

Jul 13

OWASP Global AppSec Barcelona 2025 Personal Recap

Super-brief review of my notes and highlights from the talks I attended

Jun 1

OWASP Global AppSec Barcelona 2025 Personal Recap

Jun 1

TrailAlerts: Take Control of Cloud Detection in AWS

Introducing TrailAlerts: a serverless, open-source tool to define Sigma rules and get rich, customizable alerts from your AWS account.

May 4

TrailAlerts: Take Control of Cloud Detection in AWS

May 4

Gaining Long-Term AWS Access with CodeBuild and GitHub

Discover how attackers can abuse AWS CodeBuild and GitHub Actions to gain stealthy persistence in compromised AWS environments.

Apr 13

Gaining Long-Term AWS Access with CodeBuild and GitHub

Apr 13

GitHub Actions and the Pinning Problem: What 100 Security Projects Reveal

Only 7/100 popular security projects pin everything. Here’s what I learned digging into the data.

Mar 29

GitHub Actions and the Pinning Problem: What 100 Security Projects Reveal

Mar 29

DIY — Evaluating AWS Native Approaches for Detecting Suspicious API Calls

While in my previous articles from the DIY series, I explored how to build solutions with LLMs (Using Semgrep with LLMs and Building a…

Mar 2

DIY — Evaluating AWS Native Approaches for Detecting Suspicious API Calls

Mar 2

DIY — Using Semgrep with LLMs to Improve Code Reviews

DIY code reviews: Using open-source Semgrep + AWS Bedrock AI to auto-suggest fixes for vulnerabilities.

Feb 22

DIY — Using Semgrep with LLMs to Improve Code Reviews

Feb 22

Adan

Adan

Cyber Security Engineer interested in | Cloud Security | AI | Adversary Emulation | Threat Hunting | Purple Teaming | SecDevOps - https://adan.cloud/

Following

Help

Status

About

Careers

Press

Blog

Privacy

Rules

Terms

Text to speech