Tag: #supply-chain
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 28 posts
Container Security & Supply Chain Complete Guide 2025: Image Scanning, Sigstore, SBOM, Runtime Security
Everything about container security! Image scanning (Trivy/Grype/Snyk), image signing (Sigstore/cosign), SBOM (CycloneDX/SPDX), runtime security (Falco/Tetragon), Pod Security Standards, Network Policy, Seccomp/AppArmor,
2026-04-14 · 15 min read #container-security#supply-chain#image-scanning#sigstore#sbomThe Complete DevSecOps Guide 2025: Shift-Left Security, SAST/DAST/SCA, Container Security ♪ Listenable
Everything about DevSecOps! Shift-Left security strategy, SAST (SonarQube/Semgrep), DAST (ZAP/Burp), SCA (Snyk/Dependabot), Container security (Trivy), Supply chain security (SBOM/SLSA), Secret detection, GitHub Actions
2026-03-24 · 20 min read #devsecops#security#shift-left#sast#dastUS-Iran War and Tech: Hormuz Blockade, Semiconductor Crisis, and What Developers Need to Know ♪ Listenable
The US-Iran war that began February 2026 has pushed Brent crude to $126/barrel, effectively blockaded the Strait of Hormuz (20% of global oil), doubled helium prices threatening semiconductor fabs, erased $200B+ from SK
2026-03-22 · 20 min read #geopolitics#us-iran#oil-prices#semiconductor#cybersecurityIndia's Semiconductor Revolution 2026: Will the $120B Fund Create a New Chip Superpower?
India's government is backing a $120 billion semiconductor manufacturing fund with TATA Electronics and Foxconn India to challenge Taiwan, South Korea, and Japan's semiconductor dominance. Can India capture 10-12% of glo
2026-03-16 · 6 min read #semiconductor#india#chips#geopolitics#supply-chainCybersecurity Threats March 2026: Zero-Day Exploits and Supply Chain Attacks
Critical analysis of March 2026 cybersecurity threats: Microsoft patched 84 flaws, Google released 129 Android security fixes, Cisco SD-WAN authentication bypass (CVSS 10.0), and GlassWorm supply chain attacks through VS
2026-03-16 · 7 min read #security#cybersecurity#zero-day#supply-chain#devopsGlassWorm Supply Chain Attack Analysis: Invisible Threats in VS Code Extensions and Development Environment Security Strategy ♪ Listenable
Technical analysis of the March 2026 GlassWorm malware that infected over 72 VS Code extensions. Dissects Unicode variation selector-based concealment, Solana blockchain C2 channels, and self-propagation mechanisms at th
2026-03-15 · 26 min read #devops#security#supply-chain#vscode#glasswormPython PyPI Supply Chain Attack Defense Strategy: From Typosquatting to Multi-layered Security
Analyzes the types of Python PyPI supply chain attacks that surged in 2025-2026, presenting multi-layered defense strategies against typosquatting, dependency confusion, and malicious build scripts with practical code ex
2026-03-14 · 16 min read #python#pypi#supply-chain#devops#securityContainer Image Security and Software Supply Chain Protection: A Practical Guide to Trivy, Cosign, SBOM, and Sigstore
A comprehensive guide to the full container image security lifecycle. From vulnerability scanning with Trivy, image signing with Cosign/Sigstore, SBOM generation and management, to the SLSA framework -- implement product
2026-03-13 · 15 min read #devops#container-security#trivy#cosign#sbom