Categories
research security

From Automated Social Engineering Bot to Agents

Automated Social Engineering Back in 2009, I published my master’s thesis on Automated Social Engineering (ASE). The core idea was simple: combine chatbots with data from online social networks to fully automate social engineering attacks. At the time, the poor quality of automated conversations was the main limitation. 2020s: Automated Social Engineering Became Practical Today, […]

Categories
random security

It’s Time to Migrate Your Bitnami WordPress Deployments

For years, Bitnami was the “go to solution” for Kubernetes applications. But the landscape has shifted. With the Bitnami “Free” (Community) charts now deprecated and no longer receiving security updates, staying on that path isn’t just an inconvenience—it’s a liability. If you aren’t paying for their enterprise tier, you are running unpatched CVEs on outdated […]

Categories
industry personal privacy random research security

From Academia to Industry

A personal 3 year retrospective Since more than three years I left academia and joined adidas Runtastic as an information security engineer. In this blog posts I discuss what made me move to industry and what I learned so far. After finishing my masters in Stockholm, I worked in academia for almost 10 years. This […]