Peakhour.IO - DevSecOps

Shadow APIs Are Account-Abuse Paths

AC — Fri, 19 Jun 2026 00:00:00 +1000

Shadow APIs matter because attackers do not care whether a route is documented. Mobile, partner, browser-backed, and legacy APIs can all become account-abuse paths when they remain outside normal controls.

Agentic AI vs. Your API

AC — Mon, 01 Sep 2025 00:00:00 +1000

Understand the shift from scripted bots to reasoning AI agents and how to adapt your security strategy for this new reality.

Protecting Against a Share Point Zero Day Vulnerability with Network Fingerprinting

Dan — Wed, 23 Jul 2025 13:00:00 +1000

Analysis of attempts to exploit a recent Share Point zero day vulnerability reveal network fingerprinting and classification is a robust defense.

AI as the Translator Between Human and Machine

AC — Sat, 19 Jul 2025 00:00:00 +1000

We've gone from command lines to graphical interfaces. The next great leap in how we interact with computers won't be seen, it will be understood. AI is poised to become the ultimate translator between human intent and machine execution.

From Research Paper to Running Code

AC — Fri, 18 Jul 2025 00:00:00 +1000

Exploring how AI can dramatically accelerate the process of turning complex academic research into functional code, with examples from anomaly detection to small LLMs.

My Programming Journey

AC — Thu, 17 Jul 2025 00:00:00 +1000

A personal journey through the evolution of programming, from the early days of DOS and BASIC to the current age of AI-assisted coding.

How AI Agents Are Writing Custom Exploits

AC — Mon, 17 Feb 2025 14:00:00 +1100

AI agents with reasoning capabilities like DeepSeek are revolutionizing exploit development, marking the end of traditional security approaches based on static rules and patterns.

Why Reasoning Models Like DeepSeek Change Everything

AC — Mon, 03 Feb 2025 08:13:00 +1100

How open reasoning models transform automation from rigid scripts to autonomous agents, fundamentally changing our approach to security and digital interactions.

Anti-Detect Browsers

AC — Wed, 15 Jan 2025 10:00:00 +1100

Anti-detect browsers represent one of the most sophisticated threats facing modern web applications and APIs. Learn how these tools work, why they pose a significant threat to application security, and how modern security platforms can detect and mitigate their use.

Next-Generation Application Security Defence Strategies

AC — Fri, 15 Nov 2024 14:00:00 +1100

Comprehensive analysis of AI-powered cyber threats and how modern application security platforms defend against machine learning-driven attacks. Learn advanced defence strategies for the AI cybersecurity arms race.

Managing Bots For Application Security

AC — Sun, 15 Sep 2024 00:00:00 +1000

Comprehensive guide to enterprise bot management for modern application security platforms. Learn how to protect applications and APIs from sophisticated bot threats including anti-detect browsers, credential stuffing, and automated attacks targeting DevOps environments.

Application Security for Financial Services Under CPS 234

Dan — Mon, 29 Jul 2024 10:00:00 +1000

Comprehensive analysis of credential stuffing threats against Australian financial institutions and how application security platforms help meet CPS 234 disclosure requirements whilst preventing account takeover attacks.

2024 Survey Insights

AC — Tue, 16 Jul 2024 10:00:00 +1000

Our 2024 survey of Australian CISOs and CTOs looks at how businesses are approaching account protection, particularly credential stuffing and residential proxies.

Addressing Key Cloud Security Categories

AC — Wed, 01 May 2024 10:00:00 +1000

An analysis of Peakhour's role in addressing key cloud security categories identified in recent industry analysis, demonstrating its comprehensive approach to modern cloud security challenges.

Managing Breached Credential Usage

AC — Fri, 15 Mar 2024 00:00:00 +1100

How breached credential checks and risk signals help detect credential stuffing without adding unnecessary login friction.

Dive into CVSS Scores

AC — Fri, 10 Nov 2023 00:00:00 +1100

Understand CVSS by examining the Atlassian CVE-2023-22515 and CVE-2023-22518.

A Risk Based Approach To Vulnerability Scoring

AC — Fri, 10 Nov 2023 00:00:00 +1100

An in-depth exploration of EPSS, its data-driven approach to assessing cybersecurity threats, and how it complements CVSS.

A Tale Of Two Scoring Systems

AC — Wed, 08 Nov 2023 00:00:00 +1100

Reviewing the CVSS an EPSS CVE scoring systems in light of the Atlassian Confluence-Aggedon

ModSecurity’s End-of-Life

AC — Mon, 16 Oct 2023 13:00:00 +1100

ModSecurity's end-of-life marks a pivotal moment in application security evolution. Discover how modern Application Security Platforms are advancing beyond traditional WAF approaches to provide comprehensive protection for web applications and APIs at the edge.

The Rise of OpenBullet

AC — Fri, 01 Sep 2023 14:00:00 +1000

A comprehensive look at OpenBullet, its capabilities, and the implications for cybersecurity in the face of its misuse.

Residential Proxies and MITRE Framework

AC — Wed, 17 May 2023 13:00:00 +1000

Explore residential proxies within the context of the MITRE ATT&CK framework, highlighting the security implications and ethical considerations.

Advanced Anomaly Detection

AC — Mon, 15 May 2023 13:00:00 +1000

Deep dive into Robust Random Cut Forest (RRCF) implementation for real-time anomaly detection in Application Security Platforms. Learn how advanced machine learning algorithms enhance threat detection and automated response capabilities.

Application Performance Optimisation

Dan — Sat, 12 Sep 2020 13:00:00 +1000

A practical primer for finding where website requests lose time, from cache state and origin work to browser rendering.