Medium

Explore the Topic

Cloud Security Careers

Discussions of certifications, skill requirements, and choosing between cloud security and application security entry-level paths.

Kubernetes Security

Techniques for hardening Kubernetes clusters, managing container security standards, and detecting malicious activity in orchestrated environments.

Secrets Management

Guides to handling credentials and sensitive data using AWS Secrets Manager, Google Cloud Secret Manager, and related tools.

CI/CD Security Integration

Practical approaches to embedding security scanning, SBOM generation, and vulnerability tracking into automated build and deployment pipelines.

Detection as Code

Frameworks for treating security detection rules and validation as code, including SIEM automation and purple team testing.

Dependency and Repository Risks

Explorations of dependency confusion attacks, RepoJacking vulnerabilities, and emerging standards like SLSA and Sigstore for supply chain integrity.

Latest stories

Bilaal Williams

2h ago

Headless Hacking: Setting Up a Dynamic SOCKS5 Proxy for Hack The Box Inside Docker

If you are attacking web targets on platforms like Hack The Box (HTB) or navigating OffSec lab environments, running a headless Docker…

Alhassane Samassekou

11h ago

A Disappearing Security Warning Is Not a Verified Fix

How I changed Ship Safe to distinguish missing detections, static evidence, incomplete scans and regressions.

Vortex 404

1d ago

GitHub Replaced a Giant LLM With a Tiny Classifier. Secret Scanning Got Better, Not Worse

13% higher precision, 19% higher recall, 86% faster, and over 98% cheaper — by making the model smaller, not bigger

Davebhargavi

1d ago

Your CI/CD Pipeline Is the Most Trusted Stranger in Your AWS Account

How one line in an IAM trust policy turned every GitHub repo in our org into a key to production — and the 40-minute audit that would have…

Kalp Prajapati

1d ago

The Open Door Nobody Locked: Why Cloud Storage Leaks Keep Happening

Cloud Security Explained Simply, Episode 2

See more stories

Devsecops

Explore the Topic

Cloud Security Careers

Kubernetes Security

Secrets Management

CI/CD Security Integration

Detection as Code

Dependency and Repository Risks

Latest stories

Headless Hacking: Setting Up a Dynamic SOCKS5 Proxy for Hack The Box Inside Docker

If you are attacking web targets on platforms like Hack The Box (HTB) or navigating OffSec lab environments, running a headless Docker…

A Disappearing Security Warning Is Not a Verified Fix

How I changed Ship Safe to distinguish missing detections, static evidence, incomplete scans and regressions.

GitHub Replaced a Giant LLM With a Tiny Classifier. Secret Scanning Got Better, Not Worse

13% higher precision, 19% higher recall, 86% faster, and over 98% cheaper — by making the model smaller, not bigger

Your CI/CD Pipeline Is the Most Trusted Stranger in Your AWS Account

How one line in an IAM trust policy turned every GitHub repo in our org into a key to production — and the 40-minute audit that would have…

The Open Door Nobody Locked: Why Cloud Storage Leaks Keep Happening

Cloud Security Explained Simply, Episode 2

The One Linux Login That Can Bypass Your SSH Hardening

SSH Without a Network: Connecting to VMs Through VSOCK

The SSH Configuration Rule Almost Everyone Gets Wrong

How I Would Set Up a Terraform Infrastructure as Code Foundation on AWS

Complete DevSecOps CI/CD Pipeline with Security Automation: From Development to Deployment

Hunt Diary #1: Following a ScreenConnect Phish into GitHub

End-to-End DevSecOps on EKS: Every Stage Blocks or It’s Theater

Architecting a Self-Healing Security Boundary for EKS Ingress

Devsecops

Explore the Topic

Career and OrganizationProfessional development and team-building considerations in cloud and application security roles.

Cloud Security Careers

Cloud Security PracticesApproaches to securing cloud infrastructure, managing credentials, and protecting containerized workloads.

Kubernetes Security

Secrets Management

Pipeline AutomationIntegrating security checks and tooling into continuous integration and deployment workflows.

CI/CD Security Integration

Detection as Code

Supply Chain SecurityVulnerabilities and protections in software dependencies, package registries, and build processes.

Dependency and Repository Risks

Latest stories

Headless Hacking: Setting Up a Dynamic SOCKS5 Proxy for Hack The Box Inside Docker

If you are attacking web targets on platforms like Hack The Box (HTB) or navigating OffSec lab environments, running a headless Docker…

A Disappearing Security Warning Is Not a Verified Fix

How I changed Ship Safe to distinguish missing detections, static evidence, incomplete scans and regressions.

GitHub Replaced a Giant LLM With a Tiny Classifier. Secret Scanning Got Better, Not Worse

13% higher precision, 19% higher recall, 86% faster, and over 98% cheaper — by making the model smaller, not bigger

Your CI/CD Pipeline Is the Most Trusted Stranger in Your AWS Account

How one line in an IAM trust policy turned every GitHub repo in our org into a key to production — and the 40-minute audit that would have…

The Open Door Nobody Locked: Why Cloud Storage Leaks Keep Happening

Cloud Security Explained Simply, Episode 2

The One Linux Login That Can Bypass Your SSH Hardening

SSH Without a Network: Connecting to VMs Through VSOCK

The SSH Configuration Rule Almost Everyone Gets Wrong

How I Would Set Up a Terraform Infrastructure as Code Foundation on AWS

Complete DevSecOps CI/CD Pipeline with Security Automation: From Development to Deployment

Hunt Diary #1: Following a ScreenConnect Phish into GitHub

End-to-End DevSecOps on EKS: Every Stage Blocks or It’s Theater

Architecting a Self-Healing Security Boundary for EKS Ingress