VVictor Okoroafor1d ago · 17 min readEncrypted Is Not Authenticated: What PostgreSQL sslmode Really ChecksYou've probably seen this line a hundred times and moved on: psql (18.6 (Debian 18.6-3)) SSL connection (protocol: TLSv1.3, cipher: TLS_AES_256_GCM_SHA384, compression: off, ALPN: postgresql) Type "hevictorokoroafor.hashnode.dev
SShraddha Shinde2d ago · 4 min readData Sovereignty vs Data Residency vs Data Localisation: Understanding the DifferencesData sovereignty, data residency and data localisation are often used interchangeably in cloud infrastructure discussions. However, they represent three different concepts. Confusing them can create c1Ostornox.hashnode.dev
KKazem Mortazavi3d ago · 2 min readSASE Explained: Why Backhauling Traffic to the Data Center No Longer WorksPicture a branch office whose staff spend the day in Microsoft 365 and a handful of cloud applications. Their traffic first travels to the headquarters data center, passes through the firewall and prosecurityland.hashnode.dev
PPranav Patil4d ago · 25 min readIs Your Kubernetes Cluster Pulling Malicious Images Right Now?The "Oh Shit" Moment You deploy registry.k8s.io/kube-scheduler:v1.36.0 today. It works, you move on. Tomorrow, someone with push access to that tag points it at a different image. Maybe an attacker wi0xpranav.hashnode.dev
FFonz5d ago · 11 min readGitLab's Critical CVSS 10.0 Wake-Up Call: Is Your CI/CD Pipeline Secure?The Alpine Linux incident reveals why patching GitLab is not enough—and what every business should do to protect its software supply chain. A critical vulnerability can turn a trusted development plat1aiza-hextyx.hashnode.dev
CCyber Knight6d ago · 6 min readOne Operator, 200 Targets, 11 Days: The AI Campaign That Didn't Need New DoorsSomewhere in the middle of October, one operator sat down and started 200 break-ins at once. That is the picture CrowdStrike paints in its report on VAPOR PANDA, published on 29 October 2026. From 17 nulltrace.hashnode.dev
FFonz6d ago · 14 min readBinance 6.3 Billion Heist Lesson: The Developer Workstation Is the New Production PerimeterWhat the Binance Heist and a Trojanized Claude Code Extension Reveal About Modern Enterprise Security A compromised developer environment can become a pathway into cloud infrastructure, privileged ideaiza-hextyx.hashnode.dev
YYashvi KothariOct 30 · 17 min readHow to Lock Down Google Cloud in 9 Steps Using Custom IAM Roles (GSP190 Hands-On Guide)How to Build Least-Privilege Custom IAM Roles in Google Cloud (Without Breaking Production) Stop Giving Developers the "Editor" Role: A Practical Guide to Google Cloud Custom IAM Roles The Art of thyashvikothari.hashnode.dev
Ssunal datanet hosting solutionsOct 30 · 4 min readFortinet Firewall Deployment in Noida: A Practical Guide for BusinessesBusinesses today depend on secure networks to manage customer information, cloud applications, internal communication, and daily operations. As cyber threats continue to evolve, having a properly confdatanetfortinet.hashnode.dev
CCyber KnightOct 29 · 5 min readA 2.7-Rated Flaw Let Attackers Work Without Leaving a TraceThe logs said nothing had happened. Sometime in early 2026, according to CrowdStrike, an intruder was already inside some VMware environments in the United States legal sector, with administrator accenulltrace.hashnode.dev
