Manish Pandey · WritingCybersecurity architect and researcher. 13+ years across application, infrastructure, cloud, and AI security. Writing, research, and lab notes from Bengaluru.https://manishpandey.co.in/en-us© 2026 Manish PandeyThu, 21 May 2026 11:15:34 GMTWhy STRIDE Breaks When You Threat Model AI Agents (And What to Do Instead)https://manishpandey.co.in/why-stride-breaks-when-you-threat-model-ai-agents-and-what-to-do-instead/https://manishpandey.co.in/why-stride-breaks-when-you-threat-model-ai-agents-and-what-to-do-instead/STRIDE was built for deterministic systems. Agentic AI breaks its core assumptions. Here is a five-zone method that actually finds EchoLeak-class attacks.Tue, 24 Mar 2026 00:00:00 GMTai-securitythreat-modelingllmagentic-aihello@manishpandey.co.inRed Teaming Generative AI: Language as the New Exploit Vectorhttps://manishpandey.co.in/red-teaming-generative-ai-why-language-is-the-new-exploit-vector/https://manishpandey.co.in/red-teaming-generative-ai-why-language-is-the-new-exploit-vector/Prompts are payloads. Why classical red-teaming misses LLM-native attacks, and how to design adversarial tests that surface jailbreaks, tool misuse, and goal hijack.Fri, 13 Feb 2026 00:00:00 GMTai-securityred-teamingllmhello@manishpandey.co.inHow to Fortify IoT Devices Against Hidden Cyber Threatshttps://manishpandey.co.in/how-to-fortify-iot-devices-against-hidden-cyber-threats/https://manishpandey.co.in/how-to-fortify-iot-devices-against-hidden-cyber-threats/IoT devices fail open by default. A pragmatic checklist for hardening firmware, networks, and lifecycle management against the threats most teams overlook.Sat, 11 Oct 2025 00:00:00 GMTiotinfrastructure-securityhello@manishpandey.co.inBuild Ironclad ML Security Fast: MAESTRO Framework Explainedhttps://manishpandey.co.in/build-ironclad-ml-security-fast-maestro-framework-explained/https://manishpandey.co.in/build-ironclad-ml-security-fast-maestro-framework-explained/CSA's MAESTRO framework, explained for practitioners. Layer-by-layer attack surface, control mapping, and how to apply it to your ML pipeline this week.Thu, 02 Oct 2025 00:00:00 GMTml-securityai-securityframeworkshello@manishpandey.co.inWin the AI Security Battle: Essential Moves for Leadershttps://manishpandey.co.in/win-the-ai-security-battle-essential-moves-for-leaders/https://manishpandey.co.in/win-the-ai-security-battle-essential-moves-for-leaders/Five concrete moves security leaders should make this quarter to keep up with AI adoption, without slowing the teams shipping it.Thu, 02 Oct 2025 00:00:00 GMTai-securityleadershipstrategyhello@manishpandey.co.inElevate Cyber Defense: Start Threat Modeling Nowhttps://manishpandey.co.in/elevate-cyber-defense-start-threat-modeling-now/https://manishpandey.co.in/elevate-cyber-defense-start-threat-modeling-now/Why threat modeling is the highest-leverage activity in a security program, and how to start without buying tooling or hiring consultants.Thu, 15 Aug 2024 00:00:00 GMTthreat-modelinghello@manishpandey.co.inTransform Your Security Strategy with Leading Threat Modeling Toolshttps://manishpandey.co.in/transform-your-security-strategy-with-leading-threat-modeling-tools/https://manishpandey.co.in/transform-your-security-strategy-with-leading-threat-modeling-tools/A practitioner's comparison of OWASP Threat Dragon, IriusRisk, Microsoft Threat Modeling Tool, and others, with concrete picks by team size and maturity.Sun, 02 Jun 2024 00:00:00 GMTthreat-modelingtoolinghello@manishpandey.co.inCyber Resilience: How to Implement Cutting-Edge Threat Modeling Techniqueshttps://manishpandey.co.in/cyber-resilience-how-to-implement-cutting-edge-threat-modeling-techniques/https://manishpandey.co.in/cyber-resilience-how-to-implement-cutting-edge-threat-modeling-techniques/Beyond STRIDE: attack trees, PASTA, kill chains, and how to combine them into a methodology your engineers will actually use.Sat, 01 Jun 2024 00:00:00 GMTthreat-modelingresiliencehello@manishpandey.co.inAdvance Your Security: PenTesting's Critical Edge in ISO 27001https://manishpandey.co.in/advance-your-security-pentestings-critical-edge-in-iso-27001/https://manishpandey.co.in/advance-your-security-pentestings-critical-edge-in-iso-27001/Where pentesting fits inside an ISO 27001 program, what auditors look for, and how to scope tests so they produce defensible evidence, not just findings.Sat, 17 Feb 2024 00:00:00 GMTcompliancepentestingiso-27001hello@manishpandey.co.inEmpower Your Security: Essential Insights into Threat Modelinghttps://manishpandey.co.in/empower-your-security-essential-insights-into-threat-modeling/https://manishpandey.co.in/empower-your-security-essential-insights-into-threat-modeling/A foundational guide to threat modeling: what it is, when to do it, who should be in the room, and the seven questions every model must answer.Mon, 01 Jan 2024 00:00:00 GMTthreat-modelingfundamentalshello@manishpandey.co.in