01
11 July 2026 · 15 min read
SAST vs DAST vs IAST: comparing AppSec testing tools
SAST, DAST or IAST? Compare coverage, SDLC timing, strengths, limitations, false positives and a practical AppSec rollout without alert overload.
Topic · 15 articles
Cloud, Infrastructure and DevSecOps
Security for AWS, Azure, GCP, networks, containers, Kubernetes and delivery pipelines: architecture, configuration, observability and change control.
FIELD NOTES
TOPIC INDEX
Latest research
02
10 July 2026 · 10 min read
Apple expands Private Cloud Compute to Google Cloud
Apple is moving selected PCC workloads to confidential computing on Google Cloud. We examine attestation, administrator access and trust boundaries.
03
3 July 2026 · 10 min read
Container image security: from build through runtime
Secure container images from Dockerfile and CI through signing, registries and runtime. Use this practical checklist for dependencies and deployment.
04
28 June 2026 · 11 min read
RPKI and BGP Hijacking: Securing the Internet’s Routing System
BGP does not have built-in authentication, so routes can be hijacked and traffic redirected. We explain hijacking, route leaks and RPKI, ROA and ROV validation.
05
23 June 2026 · 12 min read
DevSecOps: How to Build Security into CI/CD
Security at the end of the process is expensive and long overdue. We show you how to incorporate SAST, SCA, secret scanning, and pipeline auditing into your CI/CD pipeline - without killing your team.
06
16 June 2026 · 12 min read
Microsoft 365 security: 10 settings to start with
Microsoft 365 is the heart of most companies — and the top target of account attacks. Ten configurations that close common takeover paths.
07
2 June 2026 · 7 min read
Kubernetes security: where to start
Kubernetes gives huge flexibility and an equally large attack surface. We cover the most common mistakes — RBAC, secrets, networking — and hardening priorities.
08
15 May 2026 · 8 min read
Cloud security: the 5 configuration mistakes we see most often
Most cloud breaches don't come from the provider's flaws, but from the customer's misconfiguration. Here are the five most common traps.
09
30 April 2026 · 7 min read
Zero Trust: the end of the trusted internal network
The 'hard shell, soft centre' model no longer works. We explain what Zero Trust is, where to start a rollout and what to avoid.
10
25 April 2026 · 19 min read
CI/CD OIDC workload identity security guide
Replace static CI/CD cloud keys with OIDC, restrict trust by audience, subject and environment, and test AWS, Azure and Google Cloud federation.
11
24 April 2026 · 21 min read
Terraform and IaC security: a technical engineering guide
Secure Terraform from module to apply: provider supply chain, state and plan data, CI identity, policy as code, drift, detection and testing.
12
21 April 2026 · 21 min read
Container escape: Linux namespaces, seccomp and AppArmor
A technical container-escape model without exploit payloads: namespaces, capabilities, seccomp, AppArmor, OCI runtime, detection and hardening.
13
19 April 2026 · 20 min read
Kubernetes RBAC privilege escalation: technical assessment
Audit Kubernetes RBAC safely: bind, escalate, impersonate, ServiceAccounts, pod subresources, audit detection, admission and hardening.
14
17 April 2026 · 19 min read
AWS IAM privilege escalation testing: technical methodology
Test AWS IAM privilege escalation safely: policy evaluation, PassRole, trust policies, CloudTrail detection, least privilege and remediation.
15
4 April 2026 · 20 min read
SSRF testing: cloud metadata and egress controls
A technical SSRF testing methodology for webhooks, URL parsers, DNS rebinding, redirects, AWS IMDSv2, Azure and GCP metadata, and egress hardening.
BR / NEXT STEP
Want to prepare your team for these threats?
We turn current threats into role-based training, safe exercises and a clear reporting path. The free Academy remains available for self-directed learning.
NDA · clear scope · direct communication