Clear explainers on how modern AI works, plus security research. https://crlab.ca/learn/ 2026-06-23T12:00:00Z Zubair Ashraf https://crlab.ca/learn/careers-building-ai/infrastructure/ 2026-06-22T12:00:00Z 2026-06-22T12:00:00Z

Inference is 70-80% of AI compute spend. The engineers who make models run cheaply at scale, what they do, and what they earn.

https://crlab.ca/learn/careers-building-ai/defenders/ 2026-06-22T12:00:00Z 2026-06-22T12:00:00Z

AI red teaming is the hardest hire in security, about 3 roles per qualified person. The AI safety roles, the demand, the pay, and how to get in.

https://crlab.ca/learn/careers-building-ai/choosing-your-path/ 2026-06-22T12:00:00Z 2026-06-22T12:00:00Z

Pick an AI role by starting from the skills you already have. A practical guide to matching yourself to the right AI career track.

https://crlab.ca/learn/careers-building-ai/ 2026-06-21T12:00:00Z 2026-06-21T12:00:00Z

"I want to work in AI" is really a dozen jobs. A plain-English map of the five tiers and thirteen roles that build modern AI, what they pay, and how to break in.

https://crlab.ca/learn/careers-building-ai/researchers/ 2026-06-21T12:00:00Z 2026-06-21T12:00:00Z

Three AI research roles people mix up: what each does, what they pay (including the no-PhD path to $500K+), and how to break into each.

https://crlab.ca/learn/careers-building-ai/builders/ 2026-06-21T12:00:00Z 2026-06-21T12:00:00Z

The three roles that build most AI products, the real difference between them, pay bands, and which to start with in 2026.

https://crlab.ca/learn/careers-building-ai/learning-paths/ 2026-06-21T12:00:00Z 2026-06-21T12:00:00Z

Thirteen role-specific learning paths into AI. For each: a course to start, a program to go deep, a portfolio project, and a realistic way in.

https://crlab.ca/learn/inside-a-large-language-model.html 2026-06-18T12:00:00Z 2026-06-18T12:00:00Z

A field guide to how modern AI systems are built, trained, shrunk, and run: parameters, pre-training, post-training, parameter-efficient methods, quantization, retrieval, and inference, and how each stage maps to real hardware and real cost.

https://crlab.ca/learn/security-research/proactive-threat-hunting-and-memory-forensics-against-rombertik/ 2026-06-23T12:00:00Z 2026-06-23T12:00:00Z

Rombertik was in the news during the beginning of the month, with many headlines specifically mentioning its ability to bypass sandboxes. This malware was…

https://crlab.ca/learn/security-research/struts-vulnerabilities-analysis-parameters-cookie-interceptors-impact-exploitation/ 2026-06-23T12:00:00Z 2026-06-23T12:00:00Z

Whitelisting and blacklisting are not easy to get right. We have seen this recently with the Apache Struts vulnerabilities and multiple back-to-back…

https://crlab.ca/learn/security-research/embracing-the-uncertainty-of-advanced-attacks-using-big-data-analytics/ 2026-06-23T12:00:00Z 2026-06-23T12:00:00Z

In my continuing series of keynote recaps, I’d like to discuss two talks that center on using big data analytics to offset the uncertainty of advanced…

https://crlab.ca/learn/security-research/how-to-cheat-your-mdm-compliance-without-a-password/ 2026-06-23T12:00:00Z 2026-06-23T12:00:00Z

DID YOU KNOW? By 2016, 20% of enterprise BYOD programs will fail due to deployment of mobile device management (MDM) measures that are too restrictive.…

https://crlab.ca/learn/security-research/diy-android-malware-analysis-taking-apart-obad-part-2/ 2026-06-23T12:00:00Z 2026-06-23T12:00:00Z

DIY: Android Malware Analysis – Taking Apart OBAD (Part 1) It has been much longer that what I intended for a follow-up post on OBAD analysis , but better…

https://crlab.ca/learn/security-research/state-of-hack-cyber-threat-intelligence-kevin-mandia-mandiant-crowdstrike-fireeye/ 2026-06-23T12:00:00Z 2026-06-23T12:00:00Z

“ Mikko Hypponen at TrustyCon: Governments as Malware Authors ” was my first post in the series of cyber threat intelligence keynote recaps. There you…

https://crlab.ca/learn/security-research/a-look-back-at-the-state-of-incident-response-by-bruce-schneier/ 2026-06-23T12:00:00Z 2026-06-23T12:00:00Z

The State of Incident Response: Black Hat USA 2014 Keynote Recap from Bruce Schneier In my continuing series of keynote recaps, I will be covering Bruce…

https://crlab.ca/learn/security-research/governments-malware-authors-mikko-hypponen-trustycon/ 2026-06-23T12:00:00Z 2026-06-23T12:00:00Z

Reviving keynotes If we are to win this battle of Cyber Security we have to keep thinking strategically, learning from past and present and getting ready…

https://crlab.ca/learn/security-research/diy-android-malware-analysis-taking-apart-obad-part-1/ 2026-06-23T12:00:00Z 2026-06-23T12:00:00Z

If you know the enemy and know yourself, you need not fear the result of a hundred battles. If you know yourself but not the enemy, for every victory…

https://crlab.ca/learn/security-research/understanding-the-android-master-key-vulnerability/ 2026-06-23T12:00:00Z 2026-06-23T12:00:00Z

What does Android “master key” vulnerability and your morning coffee Drive Thru routine have in common? Bluebox Labs last week announced a vulnerability…

https://crlab.ca/learn/security-research/zeus-analysis-memory-forensics-via-volatility/ 2026-06-23T12:00:00Z 2026-06-23T12:00:00Z

I am planning to do a blog series on Malware Analysis using the Zeus sample that I recently received in an email. The idea is not only to share what it…