KKazem Mortazavi·3d agoDefense in Depth in Practice: What Stops an Attacker After the Firewall?Ask IT managers what their network security rests on, and most will name a firewall or an antivirus product. That is exactly the problem: no single point in a network is secure on its own. Defense in2 min read·securityland.hashnode.dev
MMilan Nikic·Oct 21XML external entity injection: A security architect's perspective (Part 2)Disabling DTDs in one parser doesn't scale. How to eliminate XXE architecturally: central parser policy, gateway validation, and dependency control.18 min read·securitydepth.hashnode.dev
Vvancedevllm·Sep 11Designing a Modern Cybersecurity Architecture with Microsoft SecurityExplore Zero Trust, identity protection, security operations, infrastructure security, and application in modern cybersecurity architecture.4 min read·vancedevllmitnotes.hashnode.dev
ZZero Trust Threads·Aug 22Zero Trust Explained Without the Buzzword SoupZero Trust explained without the buzzwords. Learn how identity, least privilege, continuous verification, and resource-based access improve security.5 min read·zerotrustthreads.hashnode.dev1
MMilan Nikic·Aug 18Server-Side Request Forgery: Security Architect's Perspective (Part 2)A security architect's guide to SSRF threat modeling, egress controls, cloud metadata hardening, compliance, metrics, and incident response.17 min read·securitydepth.hashnode.dev
TTopaz Hurvitz·Aug 15Status-first: how to read Microsoft's AI security stack without overstating your coverageMicrosoft AI security sources can conflict. Learn how to validate capability status across Learn, Roadmap, and Message Center before claiming coverage13 min read·cloudsecops.hashnode.dev
MMilan Nikic·Jul 27File Upload Vulnerabilities: Security Architect's Perspective (Part 2)Learn how to design secure file upload architecture with threat modeling, isolated processing, compliance mapping, testing, and incident response.16 min read·securitydepth.hashnode.dev
MMilan Nikic·May 11OS Command Injection: Security Architect's Perspective (Part 2)Architecture and program controls for preventing OS command injection: threat modeling, risk scoring, container hardening, and incident response.22 min read·securitydepth.hashnode.dev
MMilan Nikic·Apr 28Directory Traversal: A Security Architect's Perspective (Part 3)Threat modeling, risk prioritization, compliance mapping for PCI-DSS, SOC 2, GDPR, and security metrics for directory traversal at scale.16 min read·securitydepth.hashnode.dev
TThe Secure Stack·Apr 18Qubes OS Security Best Practices: The Philosophy of CompartmentalizationQubes OS can't stop user error, but it can contain it. Explore the security vs. convenience trade-off and the philosophy behind true digital resilience.3 min read·thesecurestack.hashnode.dev
