Selected Disclosures
AI coding agent — silent subscription-scoped identity abuse
A non-interactive invocation path in an AI coding agent falls back to the authenticated user's subscription when the API key is absent, executing under the victim's identity and quota with no usage signal to detect it.
Reported through coordinated bug-bounty disclosure.
Bluetooth audio SoC — firmware-authentication weakness
Protocol and OTA analysis of a widely-deployed Bluetooth audio chip family, affecting tens of millions of devices.
Coordinated disclosure to vendors, BT-SIG and MITRE in progress.
Wi-Fi/BT SoC — firmware integrity gap
Source-level analysis of a USB Wi-Fi/BT controller firmware-download path with no signature enforcement.
Coordinated disclosure in progress.
Operational details and redacted reports are shared only through responsible-disclosure channels or private review.
Advisory
From Botnet to Silicon — The Consumer Hardware Border Is Wide Open
Research manifesto linking router RCE, Bluetooth/Wi-Fi SoC integrity failures, and AI-labor marketplace threats into one supply-chain thesis.
Miasma / Shai-Hulud AI Supply-Chain Worm — Detection Guide
Detection-only companion (no exploit code). 5-level attack-surface ladder + zero-false-positive rules. Published on GitHub.
Tools & Products
Sentinel MCP — AI-Orchestrated Recon Platform
30-tool, 6-phase AI-orchestrated recon platform with specialist model routing + trust-boundary sanitization layer.
VertexOS — Security-Hardened Linux Distribution
Void-musl distro: KSPP, AppArmor, nftables default-deny, VertexSense sensor stack. Live on GitHub Releases.
VertexScan — Live Port & CVE Scanner
Free live-probe scanner. Confirmed / Phantom / Blind-spot states + KEV CVE matching.