Security Archives - Page 6 of 11

Securing Your Software Supply Chain: A Practical Guide to Syft and Grype

May 2, 2026

Master software supply chain security with Syft and Grype. Learn how to generate verifiable SBOMs and automate vulnerability scanning for all your third-party dependencies.

Security

Stop Trusting Tags: Secure Your Container Supply Chain with Cosign

April 29, 2026

Container tags are easily spoofed. Learn how to use Cosign and Sigstore to sign your images and protect your Kubernetes clusters from supply chain attacks.

Security

Stop Shipping Vulnerabilities: Automating SAST with Semgrep

April 29, 2026

Catch vulnerabilities before they hit production. This guide shows you how to use Semgrep to automate security scans in your CI/CD pipeline, reducing manual review time and preventing costly leaks.

Security

OAuth 2.0 and OpenID Connect Security: Common Vulnerabilities and How to Implement Them Correctly

April 28, 2026

OAuth 2.0 and OpenID Connect are the backbone of modern authentication, but misconfiguration is common and costly. This guide covers the most frequent vulnerabilities — missing state parameters, open redirects, improper token validation — and shows you how to implement each step correctly with practical Python examples.

Security

Hunting Leaked Secrets: Using TruffleHog to Secure Your Git History

April 28, 2026

Accidentally committed an API key? Learn how to use TruffleHog to scan your Git history, verify if secrets are still active, and remove them permanently.

Security

Automating SSL/TLS Certificate Lifecycle Management with cert-manager on Kubernetes

April 27, 2026

Manual SSL certificate management fails at scale — expiry dates get missed, secrets fall out of sync, and incidents happen over weekends. This guide walks through setting up cert-manager on Kubernetes to automate certificate issuance and renewal from both Let's Encrypt and a private internal CA, so you never chase an expiry date again.

Security

Hunting Rootkits: A Practical Guide to Linux RAM Forensics with Volatility 3

April 26, 2026

Move beyond basic logs. This practical guide shows you how to use Volatility 3 to capture Linux RAM and uncover the most stealthy rootkits and hidden processes.

Security

Kubernetes RBAC Complete Guide: Configuring Role, ClusterRole, and ServiceAccount for Least Privilege Access

April 25, 2026

Kubernetes RBAC is your first line of defense against lateral movement inside a cluster. This guide walks through creating custom Roles, ClusterRoles, and ServiceAccounts with least privilege — including verification steps and common pitfalls to avoid.

Security

Hardening the Kernel: How I Use Seccomp and Linux Capabilities to Stop Escalation

April 24, 2026

Stop privilege escalation before it starts. A senior engineer explains how to use Seccomp and Linux Capabilities to shrink your kernel attack surface based on real-world incident response.

Security

Hardening Your API Gateway: Distributed Rate Limiting with Nginx and Redis

April 22, 2026

Protect your infrastructure from traffic spikes and resource abuse. This guide shows you how to build a distributed rate-limiting system using Nginx, OpenResty, and Redis.