Blog / topic
how to
email · 5 min read
Can someone send email pretending to be you?
Yes, if your domain lacks SPF, DKIM and DMARC. Here's how email spoofing works, what each record does, and example records to copy.
Read it October 24, 2026
api keys · 5 min read
I leaked an API key. Here's exactly what to do
Leaked an API key? Revoke it first, then replace it and check for misuse. Step-by-step links for OpenAI, Anthropic, Stripe, AWS and GitHub.
Read it October 24, 2026
The newsletter
Get one scary thing a month, explained.
One real AI-security risk in plain English, a five-minute fix, and a new free tool. One email a month.