So, The Software Supply Chain is Broken. How Do We Fix It?
This post describes a logical model to improve trust and transparency in software supply chain security.
Topic
Security
Application, cloud and identity security: phishing, security keys, secrets management and the software supply chain.
Software Supply Chain Threats and Vulnerabilities
A brief on the software supply chain, and its associated threats and vulnerabilities.
CyberChef: The Cyber Swiss Army Knife
A brief on CyberChef, the cyber Swiss army knife, and self-hosting options with Railway and Render.
Open-Source Secret Management with Infisical
A step-by-step guide to deploying open-source secret management platform, Infisical, on Railway, Render, and DigitalOcean.
What is Google Secure AI Framework?
A brief on Google Secure AI Framework (SAIF), a framework for ensuring AI models are secure-by-default when implemented.
What is AI TRiSM?
A brief on AI TRiSM, Gartner's AI trust, risk and security management framework.
Safe Browsing with Google Cloud Web Risk
How Google Safe Browsing and the Web Risk API differ, what each costs, and how to check URLs with the Web Risk Lookup API in Python.
Google Titan Security Key: A Beginner's Guide
What Google's Titan Security Key does, how it compares with YubiKey, how FIDO2 passkeys work, and how to read the key's details with Python.
Getting Started with YubiKey Security Key: A Beginner's Guide
A brief introduction to the YubiKey security key, common authentication use cases, and examples for using the key in app authentication.
Passwordless SSH Login with YubiKey Security Key
A brief guide to passwordless SSH login with FIDO2-compliant YubiKey hardware security key.