Tag: #zero-trust

← All posts

• Istio Security in Practice — mTLS, AuthorizationPolicy, and the Zero Trust Mesh ♪ Listenable

  From the mesh security model built on SPIFFE identities and the istiod CA, through the PERMISSIVE-to-STRICT migration strategy for PeerAuthentication, least-privilege AuthorizationPolicy design, JWT end-user authenticati

  2026-06-13 · 21 min read #istio#mtls#security#authorizationpolicy#zero-trust

• Cilium Network Policy in Practice — Zero Trust from L3 to L7 and DNS

  A hands-on guide to going beyond the limits of Kubernetes NetworkPolicy with CiliumNetworkPolicy, controlling L3/L4/L7 and DNS-based egress. Covers a four-stage default-deny rollout roadmap, a Hubble-driven policy author

  2026-06-13 · 14 min read #cilium#network-policy#zero-trust#kubernetes#security

• Zero Trust and Identity-Aware Proxy — Building the BeyondCorp Model Yourself

  The perimeter is dead and identity-first security is the new default. This post walks through the core of the Google BeyondCorp papers and builds an Identity-Aware Proxy from scratch with oauth2-proxy and Keycloak. We co

  2026-06-12 · 18 min read #zero-trust#iap#beyondcorp#oauth2-proxy#keycloak

• SPIFFE/SPIRE Workload Identity — Service-to-Service Authentication Without Secrets

  SPIFFE/SPIRE is the answer to secret sprawl in the age of non-human identity. We cover SPIFFE IDs and SVIDs, the SPIRE server/agent architecture and attestation, hands-on Kubernetes deployment YAML, and automatic mTLS vi

  2026-06-12 · 16 min read #spiffe#spire#mtls#workload-identity#kubernetes

• VPN & Mesh Networking 2026 Deep Dive — Tailscale, WireGuard, Twingate, ZeroTier, NetBird, Nebula, Mullvad, Headscale, Pangolin ♪ Listenable

  In 2026, VPN and mesh networking split into two branches. One is WireGuard-based mesh overlays (Tailscale, Headscale, NetBird, Innernet). The other is the SASE/ZTNA commercial stack (Twingate, Cloudflare Zero Trust, Zsca

  2026-05-16 · 28 min read #vpn#mesh-networking#tailscale#wireguard#twingate

• Overlay VPN & Mesh Networking 2026 — Tailscale / Headscale / ZeroTier / Nebula / WireGuard / NetBird Deep-Dive Comparison ♪ Listenable

  In 2026 the overlay VPN market has settled into "the world where Tailscale is the de-facto standard, plus self-hosted, enterprise, and DIY camps around it." WireGuard became the universal foundation, Tailscale defined th

  2026-05-16 · 28 min read #vpn#overlay-network#mesh#tailscale#headscale

• Cloud Security 2026 Complete Guide - Zero Trust, SBOM/SLSA, CSPM/CNAPP, Wiz, Falco, Sigstore, Vault, Tailscale, Cloudflare Deep Dive ♪ Listenable

  A complete look at the cloud security stack as of May 2026. Zero Trust (Cloudflare, Tailscale, Zscaler, Netskope), CSPM/CNAPP (Wiz, Orca, Lacework, Prisma Cloud, Sysdig, Aqua), SBOM/SLSA supply chain (Sigstore cosign, Cy

  2026-05-16 · 22 min read #cloud-security#zero-trust#sbom#slsa#cspm

• Zero Trust Architecture Complete Guide 2025: Never Trust Always Verify, BeyondCorp, SASE ♪ Listenable

  Everything about Zero Trust! Never Trust Always Verify principles, Google BeyondCorp, microsegmentation, ZTNA, SASE, identity-centric security, least privilege, continuous verification, implementation roadmap, tools (Zsc

  2026-04-14 · 24 min read #zero-trust#security#identity#beyondcorp#sase

• 2026 Cybersecurity Trends — AI Threats, Ransomware, Cloud Security, Zero Trust

  Analyzing the 2026 cybersecurity landscape. From AI-powered attacks and ransomware evolution to cloud security vulnerabilities, zero trust architecture, and post-quantum cryptography readiness.

  2026-04-11 · 13 min read #ai#cybersecurity#ransomware#zero-trust#cloud-security

• NIST AI Agent Security Framework: Threat Models and Security Architecture for the Agentic AI Era ♪ Listenable

  Built on the NIST CAISI AI Agent Standards Initiative, this practitioner-focused guide covers the 3 pillars of agentic AI security (identity, isolation, monitoring), a threat taxonomy, the OWASP LLM Agent Top 10, zero tr

  2026-03-14 · 28 min read #networking#security#ai-agent#nist#threat-model

• Kubernetes Network Policy with Calico and Cilium Microsegmentation ♪ Listenable

  A comprehensive guide to Kubernetes network security using Network Policies with Calico and Cilium for microsegmentation.

  2026-03-12 · 21 min read #kubernetes#network-policy#calico#cilium#security

• The Complete Guide to Kubernetes Network Policy: Zero Trust Network Security with Cilium and Calico

  A comprehensive deep dive from Kubernetes NetworkPolicy fundamentals through Cilium CiliumNetworkPolicy (L3-L7 filtering, DNS-based policies, eBPF) and Calico GlobalNetworkPolicy. Covers Default Deny strategy, namespace

  2026-03-11 · 15 min read #kubernetes#network-policy#cilium#calico#zero-trust

• The Complete Security Guide for Developers — From Encryption to Zero Trust ♪ Listenable

  Symmetric and asymmetric encryption, hashing, TLS handshake, OWASP Top 10, SQL Injection, XSS, CSRF, and Zero Trust architecture. A comprehensive summary of security concepts every developer must know, complete with code

  2026-03-02 · 29 min read #architecture#security#encryption#zero-trust#owasp