CI CD Security

23 Sep YAML Anchors and Aliases: The Overlooked Attack Surface in CI/CD

Posted at 15:12h in CI CD Security by Stefano Gasperi 0 Comments

Master IaC cyber security with proven infrastructure as code security practices. Prevent risks for Terraform, Kubernetes or CloudFormation....

privilege escalation - what is lateral movement in cybersecurity

22 Sep Lateral Movement: How Privilege Escalation Spreads in Your Network

Posted at 16:25h in CI CD Security by Stefano Gasperi 0 Comments

Master IaC cyber security with proven infrastructure as code security practices. Prevent risks for Terraform, Kubernetes or CloudFormation....

19 Sep Platform Event Trap: Dev Workflow in Action

Posted at 13:26h in CI CD Security by Fátima Said 0 Comments

Platform event trap ensures pipeline integrity with security automation that blocks secrets, CVEs, and unsafe scripts in CI/CD....

requirements.txt - pip install requirements.txt - pip freeze requirements.txt

19 Sep Hidden Dangers of Requirements.txt: How Dependency Pinning Can Save You

Posted at 13:20h in CI CD Security by Stefano Gasperi 0 Comments

Master IaC cyber security with proven infrastructure as code security practices. Prevent risks for Terraform, Kubernetes or CloudFormation....

how to escape python -v command in terminal -command injection attack

18 Sep How to Escape Python -v Command in Terminal

Posted at 14:28h in CI CD Security by Stefano Gasperi 0 Comments

Master IaC cyber security with proven infrastructure as code security practices. Prevent risks for Terraform, Kubernetes or CloudFormation....

how are jwt tokens secure - jwt validation - jwt security

18 Sep How Are JWT Tokens Secure? Common Validation Flaws Developers Miss

Posted at 14:03h in CI CD Security by Stefano Gasperi 0 Comments

Master IaC cyber security with proven infrastructure as code security practices. Prevent risks for Terraform, Kubernetes or CloudFormation....

18 Sep Man-in-the-Middle Attack in DevOps: How Insecure Pipelines Get Hijacked

Posted at 10:24h in CI CD Security by Stefano Gasperi 0 Comments

Master IaC cyber security with proven infrastructure as code security practices. Prevent risks for Terraform, Kubernetes or CloudFormation....

broken authentication - session management- oauth security - authentication vulnerabilities

16 Sep The Broken Authentication Nightmare: Why Simple Logins Can Be Hacked

Posted at 15:47h in CI CD Security by Stefano Gasperi 0 Comments

Master IaC cyber security with proven infrastructure as code security practices. Prevent risks for Terraform, Kubernetes or CloudFormation....

how to decompile a compiled python file - python decompiler

15 Sep How to Decompile a Compiled Python File (and Why It’s a Security Risk)?

Posted at 13:42h in CI CD Security by Stefano Gasperi 0 Comments

Master IaC cyber security with proven infrastructure as code security practices. Prevent risks for Terraform, Kubernetes or CloudFormation....

jumping shell - bin/bash - escape restricted shell

29 Aug Jumping Shell: How Attackers Escape Restricted Shells to /bin/bash

Posted at 13:27h in CI CD Security by Stefano Gasperi 0 Comments

Master IaC cyber security with proven infrastructure as code security practices. Prevent risks for Terraform, Kubernetes or CloudFormation....

package-lock.json - package lock json - npm typosquatting

29 Aug Package-Lock.json Typo: How It Can Hijack Your Build

Posted at 12:42h in CI CD Security by Stefano Gasperi 0 Comments

Master IaC cyber security with proven infrastructure as code security practices. Prevent risks for Terraform, Kubernetes or CloudFormation....

python try catch - try catch python - try catch block

29 Aug Python Try Catch Blocks: When Error Handling Becomes a Risk

Posted at 11:51h in CI CD Security by Stefano Gasperi 0 Comments

Master IaC cyber security with proven infrastructure as code security practices. Prevent risks for Terraform, Kubernetes or CloudFormation....

CI CD Security

23 Sep YAML Anchors and Aliases: The Overlooked Attack Surface in CI/CD

22 Sep Lateral Movement: How Privilege Escalation Spreads in Your Network

19 Sep Platform Event Trap: Dev Workflow in Action

19 Sep Hidden Dangers of Requirements.txt: How Dependency Pinning Can Save You

18 Sep How to Escape Python -v Command in Terminal

18 Sep How Are JWT Tokens Secure? Common Validation Flaws Developers Miss

18 Sep Man-in-the-Middle Attack in DevOps: How Insecure Pipelines Get Hijacked

16 Sep The Broken Authentication Nightmare: Why Simple Logins Can Be Hacked

15 Sep How to Decompile a Compiled Python File (and Why It’s a Security Risk)?

29 Aug Jumping Shell: How Attackers Escape Restricted Shells to /bin/bash

29 Aug Package-Lock.json Typo: How It Can Hijack Your Build

29 Aug Python Try Catch Blocks: When Error Handling Becomes a Risk

Products

Resources

Company

Legal