security
Removing GitHub PATs and Private Keys From Google Cloud: Extending Token Server to Google Cloud
When Caching Hides the Truth: A VPC Service Controls & Artifact Registry Tale
How to bypass GitHub’s Branch Protection
LLMs at Work: Outsourcing Vendor Assessment Toil to AI
Mapping the Attack Surface from the Inside
Mercari’s passkey adoption
Bucket full of secrets – Terraform exfiltration
Supply-Chain Security: Evaluation of Threats and Mitigations
Fraud, How do we handle it ?
Restructuring the Kubernetes Threat Matrix and Evaluating Attack Detection by Falco
