2026

• 14 May Saved passwords in Edge memory: what we're changing and why
• 23 Mar Using Markov Models for Password Complexity Estimation in Microsoft Edge

2025

• 08 Oct Securing the Future: Changes to Internet Explorer Mode in Microsoft Edge

2024

• 21 Oct Browser Security Bugs that Aren't - #2: Web Attacks
• 24 Jun Mitigating RIDL Side-Channel Attack in Microsoft Edge on Windows
• 13 Mar Making Mojo Exploits More Difficult
• 02 Jan Browser Security Bugs that Aren't - #1: Local Attacks

2023

• 14 Nov Escaping the sandbox: A bug that speaks for itself
• 08 Feb Behind the Scenes: How we are securing our new PDF stack

2022

• 17 Oct Guest Blog Post - Memory corruption vulnerabilities in Edge
• 10 Jun A Story of a Bug Found Fuzzing
• 16 Feb Introducing Enhanced Security for Microsoft Edge

2021

• 11 Oct Bug bounty hunter to working at Microsoft
• 04 Aug Super Duper Secure Mode
• 21 Jul Guest Blog Post - Attacking the DevTools
• 02 Jun UI Security - Thinking Outside the Viewport
• 26 Mar Eliminating XSS from WebUI with Trusted Types
• 02 Mar Yet another RenderFrameHostImpl UAF

2020

• 28 Dec Deep Dive into Site Isolation (Part 2)
• 10 Nov Deep Dive into Site Isolation (Part 1)
• 16 Oct iOS Chromium Overlooked and Underappreciated
• 15 Oct Introducing Edge Vulnerability Research