Blog

All writing — vulnerability research, threat intelligence, and incident deep dives.

My Local 7B Thinks Killing a Python Process Is a Crime Why I grade AI safety probes on a $0 local model, and what a murder of crows taught me about keyword benchmarks. Your Website Is a Casino on Google — and You Can’t See It Gambling pages are being served from the websites of a Malaysian political party, government agencies and a Singapore government sandbox — while the owners see nothing. Two Critical Access-Control Flaws in a Financial Institution’s Mortgage Portal Amirul Cyber's vulnerability research on a Malaysian financial institution's mortgage portal surfaced two Critical access-control flaws exposing full identity, bank, and property data. Welcome to Amirul Cyber Welcome to Amirul Cyber — a blog covering cybersecurity research, threat intelligence, and technology in South East Asia. CIMB Securities Reportedly Claimed by INC Ransom The ransomware group INC Ransom has reportedly listed CIMB Securities on its data-leak site, claiming to have compromised the Malaysian stockbroking firm.