https://blog.shellnetsecurity.com/categories/security/ Recent content in Security on My Battles With Technology Hugo -- 0.151.2 en Fri, 18 Sep 2026 09:00:00 -0500 https://blog.shellnetsecurity.com/posts/2026/agent-bom-ai-blast-radius/ Fri, 18 Sep 2026 09:00:00 -0500 https://blog.shellnetsecurity.com/posts/2026/agent-bom-ai-blast-radius/ A CVE in a random package is background noise. The same CVE reachable from an AI agent with a live API key in scope is an incident. agent-bom is built to tell you which one you're looking at. https://blog.shellnetsecurity.com/posts/2026/macaron-supply-chain-provenance/ Fri, 11 Sep 2026 06:00:00 -0500 https://blog.shellnetsecurity.com/posts/2026/macaron-supply-chain-provenance/ A CVE scanner tells you if a package has known vulnerabilities. It says nothing about whether the artifact was actually built from the source you think it was. https://blog.shellnetsecurity.com/posts/2026/tejolote-black-box-provenance/ Fri, 28 Aug 2026 09:00:00 -0500 https://blog.shellnetsecurity.com/posts/2026/tejolote-black-box-provenance/ A hands-on run of Tejolote against a real GitHub Actions build: SLSA provenance, a workflow-YAML parser crash, and a run-status race that quietly drops artifacts. https://blog.shellnetsecurity.com/posts/2026/threatcaddy-local-first-investigation-workspace/ Fri, 21 Aug 2026 09:00:00 -0500 https://blog.shellnetsecurity.com/posts/2026/threatcaddy-local-first-investigation-workspace/ A hands-on walkthrough of ThreatCaddy, a local-first threat investigation workspace built on IndexedDB. IOC extraction, entity graphs, and a real StrictMode bug found and fixed along the way. https://blog.shellnetsecurity.com/posts/2026/mitmproxy-security-regression-harness/ Fri, 03 Apr 2026 09:00:00 -0500 https://blog.shellnetsecurity.com/posts/2026/mitmproxy-security-regression-harness/ A deep dive into mitmproxy for security testing. Learn how to build a scriptable regression harness to catch header drift and token leakage in mobile and API traffic. https://blog.shellnetsecurity.com/posts/2026/container-security-fundamentals/ Fri, 06 Mar 2026 09:00:00 -0500 https://blog.shellnetsecurity.com/posts/2026/container-security-fundamentals/ Containers aren't magic security boundaries. Here's a practical breakdown of the controls that actually reduce risk: non-root users, read-only filesystems, capability drops, image scanning, and proper secrets handling. https://blog.shellnetsecurity.com/posts/2026/building-ai-assisted-security-tools/ Fri, 09 Jan 2026 09:00:00 -0500 https://blog.shellnetsecurity.com/posts/2026/building-ai-assisted-security-tools/ Apply the Centaur framework to security tooling. Learn how to build AI-augmented security tools while keeping humans in control of high-stakes decisions. https://blog.shellnetsecurity.com/posts/2025/using-ai-to-analyze-log-files-for-security-threats/ Sun, 09 Nov 2025 10:00:00 +0000 https://blog.shellnetsecurity.com/posts/2025/using-ai-to-analyze-log-files-for-security-threats/ Learn how to leverage AI and machine learning to analyze log files for security threats. Explore practical techniques using Python, scikit-learn, and LLMs for anomaly detection and threat hunting. https://blog.shellnetsecurity.com/posts/2025/deep-dive-into-passkey-logins-security-analysis-and-implementation/ Tue, 24 Jun 2025 00:00:00 +0000 https://blog.shellnetsecurity.com/posts/2025/deep-dive-into-passkey-logins-security-analysis-and-implementation/ Production WebAuthn/FIDO2 passkey implementation with complete registration/authentication flows, server-side verification, cross-platform syncing, and security analysis. Includes Node.js, Python backends with working code. https://blog.shellnetsecurity.com/posts/2025/revolutionizing-vulnerability-discovery-with-ai-powered-fuzzing/ Mon, 31 Mar 2025 00:00:00 +0000 https://blog.shellnetsecurity.com/posts/2025/revolutionizing-vulnerability-discovery-with-ai-powered-fuzzing/ Enhance vulnerability discovery with AI-powered fuzzing: reinforcement learning input generation, coverage-guided testing, and automated exploit development techniques. https://blog.shellnetsecurity.com/posts/2025/mitigating-ai-generated-vulnerabilities/ Wed, 05 Mar 2025 00:00:00 +0000 https://blog.shellnetsecurity.com/posts/2025/mitigating-ai-generated-vulnerabilities/ Production security workflows for AI-generated code using Semgrep, Bandit, CodeQL, and secure prompting strategies. Includes complete CI/CD integration, automated scanning, and best practices for GitHub Copilot/ChatGPT/Claude. https://blog.shellnetsecurity.com/posts/2025/scalable-mobile-apps-with-react-native/ Wed, 29 Jan 2025 00:00:00 +0000 https://blog.shellnetsecurity.com/posts/2025/scalable-mobile-apps-with-react-native/ Build scalable React Native apps with OAuth 2.0, JWT authentication, Redux state management, Firebase integration, and AES encryption for cross-platform development. https://blog.shellnetsecurity.com/posts/2024/enhancing-secure-boot-with-unified-kernel-images-ukis/ Tue, 31 Dec 2024 00:00:00 +0000 https://blog.shellnetsecurity.com/posts/2024/enhancing-secure-boot-with-unified-kernel-images-ukis/ Discover the concept of Unified Kernel Images (UKIs) and learn how to implement them to improve secure boot processes. https://blog.shellnetsecurity.com/posts/2024/sha-256-migration-guide/ Tue, 31 Dec 2024 00:00:00 +0000 https://blog.shellnetsecurity.com/posts/2024/sha-256-migration-guide/ Learn about the evolution of cryptographic hash functions, the limitations of SHA-1, and how to implement SHA-256 in your applications. https://blog.shellnetsecurity.com/2024/03/797/cloudstuff/aws/demystifying-aws-security-a-beginners-guide-to-key-concepts-and-services/ Wed, 06 Mar 2024 08:03:11 +0000 https://blog.shellnetsecurity.com/2024/03/797/cloudstuff/aws/demystifying-aws-security-a-beginners-guide-to-key-concepts-and-services/ Translate AWS security to on-premise concepts. Learn IAM, VPC, Security Groups, KMS, GuardDuty, and essential services for cloud security beginners. https://blog.shellnetsecurity.com/2024/02/787/general/hardening-your-ci-cd-terraform-docker-and-kubernetes-security/ Fri, 01 Mar 2024 18:38:06 +0000 https://blog.shellnetsecurity.com/2024/02/787/general/hardening-your-ci-cd-terraform-docker-and-kubernetes-security/ Build secure Docker images and deploy to Kubernetes with Terraform. Includes Hadolint, Terrascan, and automated security scanning workflows. https://blog.shellnetsecurity.com/2024/02/768/code/python/build-secure-python-pipelines-adding-tests-and-hooks-in-action/ Sun, 18 Feb 2024 13:37:02 +0000 https://blog.shellnetsecurity.com/2024/02/768/code/python/build-secure-python-pipelines-adding-tests-and-hooks-in-action/ Add pre-commit hooks, automated tests, and pytest to Python pipelines. Secure your code with Black, Flake8, Bandit, and GitHub Actions integration. https://blog.shellnetsecurity.com/2024/02/732/kubernetes/cribl-splunk_hec-datasource-the-ultimate-guide-for-kubernetes-log-ingestion/ Sun, 11 Feb 2024 04:22:00 +0000 https://blog.shellnetsecurity.com/2024/02/732/kubernetes/cribl-splunk_hec-datasource-the-ultimate-guide-for-kubernetes-log-ingestion/ Route Kubernetes logs through Cribl to Splunk using HEC. Complete guide with pipeline setup, filtering, and free 1TB/day ingestion tier. https://blog.shellnetsecurity.com/2024/02/751/github/getting-started-with-secure-ci-cd-essential-practices-for-beginners/ Sun, 04 Feb 2024 17:57:59 +0000 https://blog.shellnetsecurity.com/2024/02/751/github/getting-started-with-secure-ci-cd-essential-practices-for-beginners/ Secure your CI/CD pipeline with GitHub branch protection, Dependabot, CodeQL, and secret scanning. Essential security practices for beginners. https://blog.shellnetsecurity.com/2024/01/723/security/from-scattered-to-splunk-bringing-order-to-your-kubernetes-logs/ Sun, 28 Jan 2024 09:23:57 +0000 https://blog.shellnetsecurity.com/2024/01/723/security/from-scattered-to-splunk-bringing-order-to-your-kubernetes-logs/ Centralize Kubernetes logs with Splunk using OpenTelemetry Collector. Step-by-step guide with Helm charts, filtering, and HEC configuration. https://blog.shellnetsecurity.com/2024/01/719/kubernetes/silence-not-golden-fixing-the-mute-button-on-tetragon-logs/ Sun, 21 Jan 2024 10:08:16 +0000 https://blog.shellnetsecurity.com/2024/01/719/kubernetes/silence-not-golden-fixing-the-mute-button-on-tetragon-logs/ Troubleshoot Tetragon logging in Kubernetes clusters. Learn how to properly access logs from all nodes and avoid common daemonset command mistakes. https://blog.shellnetsecurity.com/2024/01/708/security/from-jargon-to-genius-cracking-the-code-of-spf-dkim-dns-records/ Fri, 05 Jan 2024 15:45:51 +0000 https://blog.shellnetsecurity.com/2024/01/708/security/from-jargon-to-genius-cracking-the-code-of-spf-dkim-dns-records/ Master SPF and DKIM DNS records to prevent email spoofing, boost deliverability, and protect your brand from impersonation attacks with practical examples. https://blog.shellnetsecurity.com/2024/01/704/security/dmarc-reports-your-secret-weapon-against-domain-fraud-and-how-to-read-them/ Thu, 04 Jan 2024 15:13:51 +0000 https://blog.shellnetsecurity.com/2024/01/704/security/dmarc-reports-your-secret-weapon-against-domain-fraud-and-how-to-read-them/ Learn to read DMARC reports, protect your domain from email fraud, and implement DNS records step-by-step for better email security and deliverability. https://blog.shellnetsecurity.com/2023/12/698/kubernetes/from-reactive-to-proactive-transforming-security-with-tetragon/ Mon, 18 Dec 2023 21:36:44 +0000 https://blog.shellnetsecurity.com/2023/12/698/kubernetes/from-reactive-to-proactive-transforming-security-with-tetragon/ Implement runtime security with Tetragon on Kubernetes. Monitor process execution, file access, and network connections with eBPF-based observability. https://blog.shellnetsecurity.com/2023/12/695/kubernetes/from-vulnerability-to-visibility-demystifying-starboard-infrastructure-scan-reports/ Sat, 16 Dec 2023 21:53:00 +0000 https://blog.shellnetsecurity.com/2023/12/695/kubernetes/from-vulnerability-to-visibility-demystifying-starboard-infrastructure-scan-reports/ Review Starboard infrastructure scan reports with kube-bench. Understand CIS Kubernetes Benchmark findings and assess node-level security configurations. https://blog.shellnetsecurity.com/2023/12/691/security/enhancing-kubernetes-security-and-compliance-with-starboard-audit-reports-a-practical-guide/ Sat, 09 Dec 2023 13:11:08 +0000 https://blog.shellnetsecurity.com/2023/12/691/security/enhancing-kubernetes-security-and-compliance-with-starboard-audit-reports-a-practical-guide/ Analyze Starboard configuration audit reports with jq. Fix Kubernetes security violations, implement security contexts, and maintain compliance standards. https://blog.shellnetsecurity.com/2023/12/686/kubernetes/leveraging-initcontainers-to-streamline-bitnami-mysql-initialization/ Sat, 02 Dec 2023 13:00:58 +0000 https://blog.shellnetsecurity.com/2023/12/686/kubernetes/leveraging-initcontainers-to-streamline-bitnami-mysql-initialization/ Use Kubernetes initContainers with Bitnami MySQL to sync data from Git repos. Streamline database initialization and maintain secure container images. https://blog.shellnetsecurity.com/2023/11/681/security/how-to-install-and-use-starboard-to-protect-your-kubernetes-cluster/ Fri, 24 Nov 2023 12:05:03 +0000 https://blog.shellnetsecurity.com/2023/11/681/security/how-to-install-and-use-starboard-to-protect-your-kubernetes-cluster/ Install and use Starboard for Kubernetes cluster security. Scan containers for vulnerabilities with Trivy, review reports, and upgrade images to fix issues. https://blog.shellnetsecurity.com/2023/11/677/cloudstuff/securing-your-ci-cd-pipeline-a-beginners-guide-to-implementing-essential-security-measures/ Thu, 16 Nov 2023 19:58:52 +0000 https://blog.shellnetsecurity.com/2023/11/677/cloudstuff/securing-your-ci-cd-pipeline-a-beginners-guide-to-implementing-essential-security-measures/ Secure CI/CD pipelines with Terrascan security scanning. Fix Terraform and Kubernetes vulnerabilities, integrate with GitHub Actions, and automate compliance. https://blog.shellnetsecurity.com/2022/10/365/wordpress/tuning-my-content-security-policy/ Sun, 16 Oct 2022 13:24:00 +0000 https://blog.shellnetsecurity.com/2022/10/365/wordpress/tuning-my-content-security-policy/ Real-world CSP tuning: analyzing 3,500+ violation reports to progressively tighten a Content Security Policy from permissive to secure. Includes data tables and practical policy adjustments.