Hey, I'm Het Mehta
A cybersecurity professional, ethical hacker, and tech enthusiast. Sharing insights, research, and tutorials on security, philosophy, and more.
Read my latest posts or check out my About Me page.
Recent Posts
-
Using LLMs for Malware Analysis: What Works, What Fails, and How to Do It Safely
Published: at 11:00 AMA long, evidence-based guide to using LLMs in malware analysis as of November 2026: what the studies and practitioner reports show, where models fail, how malware now talks back to AI analysts, how to handle samples and data safely, and a workflow with tested code.
-
An MCP Server Security Checklist for Authors (With the Real Bugs Behind Each Item)
Published: at 10:30 AMA long, practical security checklist for people who build MCP servers. Most items are tied to the MCP specification or to a real CVE or incident, with tested code, a test plan, and a prompt you can paste into your own agent.
-
Your First Security Hire at an AI Startup: The First 90 Days, With Receipts
Published: at 10:20 AMA long, opinionated 90-day plan for the first security and compliance hire at an AI-native company. Built from real incidents, the 2026 breach data and the frameworks people actually use, with a worked threat model and a prompt you can paste into your own agent.
-
SOC 2 for AI Products: What Auditors Will Ask About Your LLM Features (Late 2026 Edition)
Published: at 10:10 AMHow SOC 2 applies to products with LLM features as of November 2026: what the criteria say, what the AICPA published this autumn about AI, how LLM providers are treated, how ISO 42001, the NIST AI RMF and the EU AI Act fit, and a prompt you can paste into your own agent.
-
Breaking Down GreenPlasma and YellowKey: Windows Trust Boundaries Doing Windows Things
Updated: at 10:35 AMA beginner-friendly technical breakdown of GreenPlasma and YellowKey, two Nightmare-Eclipse Windows disclosures involving CTFMON, Object Manager abuse, WinRE, BitLocker, and the eternal comedy of Windows trusting itself too much.
-
Breaking Down CVE-2026-25049: How an AST Sanitizer Gap Broke n8n's Expression Sandbox
Published: at 07:35 AMTechnical analysis of n8n's CVE-2026-25049: how a computed property key in a destructuring pattern slipped past the expression sandbox's AST sanitizer, and why blocklist sanitizers keep losing.
Book a call
Want to talk security, careers or a review of your product? Book a session with me.
Book a session on Topmate