3 min read
Industry Overview, An Anecdotal Take
Why cyber risk remains a complex, human-centered challenge and how organizations can approach it realistically.
Read more
Michael Weimer
Red Teamer, Hacker, CTO @ Hoplite Consulting. Focused on research into Active Directory and Entra ID.
Latest Post
What's Crossed My Algo
View full feedPosts, Blogs, Whitepapers, Videos that I've Found Interesting...
Social X Feb 21, 2026
Every Entra ID assessment ends here: “How do I get a token without triggering Conditional Access controls?” 🤔@rbnroot built CAPSlock, an offline ROADrecon-based Conditional Access engine that simulates sign-ins & flags gaps without touching the tenant.
@SpecterOps
Social X Feb 21, 2026
Bought a new Mac mini to properly tinker with claws over the weekend. The apple store person told me they are selling like hotcakes and everyone is confused :) I'm definitely a bit sus'd to run OpenClaw specifically - giving my private data/keys to 400K lines of vibe coded…
@Andrej Karpathy
Social X Feb 21, 2026
X Article
Shared by @Jason Lang
Article Web Feb 21, 2026
Worlds: A Simulation Engine for Agentic Pentesting
An 8B model went from blindly loading Metasploit modules to achieving Domain Admin on GOAD, trained entirely on synthetic data from our world model system.
Article Web Feb 21, 2026
Minions: Stripe’s one-shot, end-to-end coding agents
Minions are Stripe’s homegrown coding agents, responsible for more than a thousand pull requests merged each week. Though humans review the code, minions write it from start to finish. Learn how they work, and how we built them.
Video YouTube Feb 21, 2026
OpenClaw: The Viral AI Agent that Broke the Internet - Peter Steinberger | Lex Fridman Podcast #491
by Lex Fridman
Social X Feb 21, 2026
I've been researching the Microsoft cloud for almost 7 years now. A few months ago that research resulted in the most impactful vulnerability I will probably ever find: a token validation flaw allowing me to get Global Admin in any Entra ID tenant. Blog: https://t.co/jD6EaGtsn3 &
@Dirk-jan
Recent Writing
View all posts 2 min read
Pilot: About Me
Michael Weimer shares his background in offensive security and why he now focuses on reducing enterprise risk.
Read moreStay updated
Get notified when I publish new articles on cybersecurity, risk management, and enterprise security.
No spam, unsubscribe anytime. Powered by Buttondown.
What I Write About
Risk Identification
Understanding attack surfaces
Risk Management
Strategic cyber defense
Enterprise Security
Scaling security programs
Industry Insights
Practical perspectives