JSJayakumar Sakthivelincloudwithjk.hashnode.dev·20h ago · 15 min readTetragon: Kubernetes Runtime Security at the Kernel Level — Theory and ArchitectureIntroduction You've hardened your container images. You've written Network Policies. You've configured RBAC. You've scanned your CI/CD pipeline for vulnerabilities. And yet—a compromised container is 00
Ppraveeninthecoderegistry.hashnode.dev·1d ago · 24 min readStatic Analysis vs Dynamic Analysis vs AI Code AnalysisSoftware analysis used to be relatively straightforward. Developers wrote code, static analysis scanned it, security teams tested the running application, and code reviewers evaluated important change00
OZOliver Zehentleitnerinblog.technopathy.club·2d ago · 4 min readOne Index, Many Writers: Avoiding Git Merge Conflicts with Deterministic Write AreasWhile working on Keep the Why, I ran into a very ordinary Git problem. There is one shared context/index.md. Developers and coding agents can add new context files in different branches. The changes a24SM
RSRushabh Shahindepwarden.hashnode.dev·2d ago · 5 min readSAST vs SCA: why your CI pipeline needs bothWhen security teams talk about "scanning" code in CI/CD, they usually mean one of two very different things: scanning the code you wrote (SAST) or scanning the open-source code you imported (SCA). Bot00
LLoginsoftinloginsoft.hashnode.dev·3d ago · 8 min readCVE Backlogs and NVD Delays in 2026: How Security Teams Are Actually Coping Introduction If you run a vulnerability management program, the pattern is familiar: a CVE is published, your scanner detects it, and then you wait for NVD enrichment. When NVD enrichment is unavailab00
JJebitokinsharonjebitok.com·3d ago · 24 min readDevSecOps Basics (TryHackMe)Link to the challenge on TryHackMe: DevSecOps Basics Introduction In this lab, you will get introduced to the different styles of Software Development and their evolution throughout the years. It's es00
SPSruthi Palleinsruthipalle.hashnode.dev·4d ago · 6 min readProduction-Grade Terraform (Part 8) —Terraform Variable Type ConstraintsTerraform Variables Terraform variables are generally classified by their purpose or the value they contain. While purpose-based variables include input, output, and local variables, value-based varia00
AJAmartya Jhainsecurity-research.hashnode.dev·5d ago · 10 min readThe Deployment Velocity Gap: Why Annual Pentesting Can't Keep Up With Modern SaaSMost SaaS teams still pentest once a year. Almost none of them ship code once a year. That mismatch is the actual security problem worth talking about, more than any single vulnerability class. Securi00
IAInioluwa Adeyemoininioluwa2003.hashnode.dev·5d ago · 3 min readWeek 2: Cryptography, Git & GitHubWeek 2 is done, and I'm glad I could achieve all the goals set for this week. Let's get into how the week went. What I Did I finished the remaining modules of the Coursera Applied Cryptography course,00
CACiphemic academiainciphemicacademia.hashnode.dev·6d ago · 9 min readDevSecOps Career Path — From DevOps to Security-First PipelinesSecurity Bolted on at the End Is Not DevSecOps The most common failure pattern in teams that claim to "do DevSecOps" looks like this: build the pipeline, ship the feature, and run a security scan righ00
