3 posts
Writing
KEV analyses, prioritization notes and lab write-ups. Where I work through vulnerability, exposure and third-party risk questions in public.
- 5 min read
KEV under BOD 26-04: what 131 additions say about where to look first
Since CISA's BOD 26-04 took effect, 82% of new KEV entries carry a three-day remediation window. A look at every addition from June 11 to October 16, 2026, what changed, and which product classes keep landing on the short clock.
CISA KEVBOD 26-04exposure managementthreat-informed prioritization - 4 min read
Flax Typhoon's October 8 KEV batch: five old CVEs, a three-day clock
CISA added five CVEs from 2015 to 2023 to the KEV catalog on October 8, 2026, tied to activity consistent with Flax Typhoon. What each one is, why four are flagged for forensic triage, and how I would work the batch.
CISA KEVthreat intelligenceFlax TyphoonBOD 26-04 - 2 min read
Building an AI-Powered Prediction Market Trading Bot
How I architected a dual-AI pipeline with Gemini 2.5 Pro and Claude Sonnet 4.6 to autonomously analyze and trade on Polymarket, with real-time dashboards, multi-layer risk management, and a backtesting engine.
pythonaitradingarchitecture