https://reykur.io/blog/ Research, product thinking, and field notes on continuous product security from the Reykur team. en Tue, 06 Oct 2026 00:00:00 GMT https://reykur.io/blog/threat-modeling-in-the-ai-era/ https://reykur.io/blog/threat-modeling-in-the-ai-era/ Tue, 06 Oct 2026 00:00:00 GMT Elliot Ward Threat Modeling AI Tooling Secure SDLC Why one-shot LLM threat models fail, which frameworks fit AI agents and MCP, four real incidents, and how continuous threat modeling keeps up. https://reykur.io/blog/reykur-joins-tech4trust/ https://reykur.io/blog/reykur-joins-tech4trust/ Mon, 28 Sep 2026 00:00:00 GMT Elliot Ward Company News We are part of Season 8 of Tech4Trust, Switzerland's accelerator for cybersecurity startups. What the programme is, why we applied, and what comes next. https://reykur.io/blog/exposed-git-directories-2026/ https://reykur.io/blog/exposed-git-directories-2026/ Fri, 24 Jul 2026 00:00:00 GMT Kirill Efimov Security Research Web Security Truffle Security counted 4,500 top-1M sites exposing .git in 2024. We re-ran the scan in 2026: 3,618 still do. Same bug, same one-line fix. https://reykur.io/blog/ai-coding-assistant-shipping-secrets/ https://reykur.io/blog/ai-coding-assistant-shipping-secrets/ Thu, 07 May 2026 00:00:00 GMT Kirill Efimov Security Research AI Tooling Supply Chain Coding agents write settings, logs and helper files into your repo that were never meant to leave your laptop. Where they end up, what they contain, and how to stop shipping them.