Writing on offensive security, cloud security, threat intelligence, and building security programs that hold up under real attack.https://samithota.com/https://samithota.com/blog/aws-billing-console-glitch-triggers-inaccurate-cost-estimates/https://samithota.com/blog/aws-billing-console-glitch-triggers-inaccurate-cost-estimates/Learn what caused the AWS Billing Console glitch on July 16-17, 2026, why your cost estimates are inaccurate, and why you don't need to panic.Fri, 17 Jul 2026 00:00:00 GMTIndustry AnalysisnewsSamit Hotahttps://samithota.com/blog/cloud-iam-blind-spots/https://samithota.com/blog/cloud-iam-blind-spots/Over-permissioned roles and implicit trust chains are the single most common finding across cloud security assessments. Here's why they keep happening.Tue, 02 Jun 2026 00:00:00 GMTCloud Securityawsiamcloud-securitySamit Hotahttps://samithota.com/blog/beyond-compliance-checklist/https://samithota.com/blog/beyond-compliance-checklist/SOC 2 and ISO 27001 prove you have a process. They don't prove an attacker can't get in. Here's how to talk about the gap with leadership.Thu, 14 May 2026 00:00:00 GMTCareer & Advisorycompliancerisk-managementleadershipSamit Hotahttps://samithota.com/blog/anatomy-of-a-supply-chain-attack/https://samithota.com/blog/anatomy-of-a-supply-chain-attack/A walkthrough of how a single compromised dependency turns into full CI/CD compromise, and the specific control points that stop it in practice.Tue, 21 Apr 2026 00:00:00 GMTOffensive Securitysupply-chainci-cdred-teamSamit Hotahttps://samithota.com/blog/state-of-ransomware-2026/https://samithota.com/blog/state-of-ransomware-2026/Ransomware operators have shifted from smash-and-encrypt to slow, quiet data theft. Here's what that means for detection and response strategy.Mon, 09 Mar 2026 00:00:00 GMTThreat Intelligenceransomwarethreat-intelincident-responseSamit Hota