Jun 1 · 7 min read · As platform engineering evolves, we are constantly battling alert fatigue. We run our vulnerability scanners, generate endless Software Bill of Materials (SBOMs), and drop massive PDF reports onto dev
Join discussion
May 27 · 8 min read · The Problem That Started It All If you run servers, write code, or manage containers, you already know the uncomfortable truth: vulnerabilities, exposed secrets, and misconfigurations are everywhere.
KVSKODE and 2 more commented
May 2 · 9 min read · On March 26, 2026, security researchers at Socket.dev flagged anomalous publishing activity across dozens of npm packages. Within hours, the scope of the incident became clear: a threat actor operating under the handle TeamPCP had compromised a singl...
Join discussionApr 23 · 23 min read · A month of late nights, broken pipelines, unfixable CVEs, and one cluster that refused to scale — here's the full story of building AutoScaleOps: a complete CI/CD platform with security gates, GitOps,
Join discussion
Apr 11 · 15 min read · Executive Summary On March 24, 2026, threat group TeamPCP successfully pushed two backdoored versions of the Python library LiteLLM (v1.82.7 and v1.82.8) to PyPI — a package registry serving over 95 m
Join discussion
