Software Supply Chain Security in Production: Signals That Show the Control Works
A practical security engineering field guide to software supply chain security, covering risk, implementation, evidence, and team leadership.
Nathan Berg
Implementing Software Supply Chain Security Without Slowing Delivery
A practical security engineering field guide to software supply chain security, covering risk, implementation, evidence, and team leadership.
Hardening SSH: Modern Ciphers, MFA, and Audit Trails
SSH is the most attacked service in most home labs. Hardening it is not just about disabling passwords. You want modern cryptography, strong authentication, and an audit trail that lets you investi...
Failure Modes in Software Supply Chain Security: A Design-Level Analysis
A practical security engineering field guide to software supply chain security, covering risk, implementation, evidence, and team leadership.
A Team Playbook for Improving CI/CD Pipeline Security
A practical security engineering field guide to ci/cd pipeline security, covering risk, implementation, evidence, and team leadership.
Operating CI/CD Pipeline Security: Ownership, Evidence, and Exceptions
A practical security engineering field guide to ci/cd pipeline security, covering risk, implementation, evidence, and team leadership.
Engineering CI/CD Pipeline Security into the Paved Road
A practical security engineering field guide to ci/cd pipeline security, covering risk, implementation, evidence, and team leadership.
Detecting Lateral Movement with SMB and WinRM Telemetry
Lateral movement is the point where an intrusion turns into a breach. Two of the most common Windows pathways are SMB (port 445) and WinRM (ports 5985 and 5986). If you can monitor how these protoc...
An Architecture Review Playbook for CI/CD Pipeline Security
A practical security engineering field guide to ci/cd pipeline security, covering risk, implementation, evidence, and team leadership.
CI/CD Pipeline Security: What the Team Must Decide Before Building
A practical security engineering field guide to ci/cd pipeline security, covering risk, implementation, evidence, and team leadership.