KSKamran Shaghaghiincloudironguard.hashnode.dev·2h ago · 8 min readCloud Iron Guard: Building Production-Grade Defense-in-Depth on GKE with Terraform, gVisor, and OPA GatekeeperWhen designing production infrastructure on Google Kubernetes Engine (GKE), relying on a single security control—like basic IAM or default network policies—is a recipe for disaster. True cloud resilie00
Wworkwithdebugginglifeininside-devsecops.hashnode.dev·1d ago · 5 min readInside DevSecOps: Roadmap, Strategy, and Career Growth | echo "Part 1" DevOps is all about bringing development and operations together to deliver software faster and more efficiently. DevSecOps takes that same idea but adds security into the mix - making sure every piec00
ASAsep Sayyadinasepsayyad007.hashnode.dev·1d ago · 4 min readThe Linux Skills That Separate Junior and Senior DevOps EngineersThe Linux Skills That Separate Junior and Senior DevOps Engineers: A Practical Comparison Introduction Many people believe that becoming a senior DevOps engineer means learning Kubernetes, Terraform, 00
MSManu Shuklainecorpit.hashnode.dev·2d ago · 13 min readOpenAI Codex Security CLI in CI: the 2026 setup and the gated-engine catchOpenAI Codex Security CLI in CI: the 2026 setup and the gated-engine catch Summary. OpenAI open-sourced the Codex Security CLI and TypeScript SDK on 29 July 2026 under an Apache-2.0 licence, as the pu00
JSjagmohan singhinjagsingh-security.hashnode.dev·3d ago · 4 min readVM and AppSec Walked Into a Backlog... and Never LeftThe Same Finding, Twice A scanner flags a finding on a customer-facing application. VM logs it as a misconfigured server — 30-day SLA, medium priority, patch it in the next maintenance window. AppSec 10
HHuman_On_The_Loopinhotl.xaasware.io·4d ago · 6 min readYou Can't Least-Privilege a GoalEvery access model we have built over the last thirty years rests on one assumption: the thing holding the credential has a job. A person has a role. A service account supports a defined workload. Tho00
AMAdbin Magarinthegreylens.hashnode.dev·6d ago · 5 min readLearning Azure and DevSecOps Automation: Building a Secure SandboxHi! I'm Adbin Magar, the researcher behind TheGreyLens. If you’ve seen my previous blogs, you know I’ve been working through CTF challenges, VDP program and documenting it. Recently, I have been expan00
AKAkaeze Kosisochukwuinaudrey01.hashnode.dev·Jul 27 · 8 min readThe IP address that Shouldn't Exist but doesImagine losing over a hundred million customers' data to the public overnight. That was Capital One's reality in 2019. Although multiple failures contributed to this breach, sitting at the center of t00
OZOsomudeya Zudonuinfreecodecamp.org·6d ago · 233 min readHow to Build a Production-Ready DevSecOps Platform from Homelab to AWS [Full Book]In this book, you'll build a fintech transaction ledger from scratch and progressively transform it into a production-ready DevSecOps platform. You'll also deploy it on AWS. The app processes credit a00
HHugoinhugovalters.hashnode.dev·6d ago · 4 min readProxmox SDN: Software-Defined Networking for Multi-Node ClustersI got the call at 2:47 AM. A junior admin had deleted a VNet while five production VMs were running. All of them dropped off the network simultaneously. The /etc/pve/sdn/ directory had no backups. We 00
