Posts

Supply Chain Cyberattacks: Lessons from the UNFI Breach The June 2025 cyberattack on United Natural Foods Inc. (UNFI) exposed critical vulnerabilities in food distribution infrastructure, disrupting shipments to over 30,000 stores including Whole Foods. This technical deep dive analyzes the attack’s mechanisms, operational impacts, and actionable security controls for supply chain resilience. Incident Timeline and Impact Analysis Attack Chronology June 5, 2025: Initial breach detected via anomalous EDI traffic patterns June 6: UNFI takes critical systems offline, including: Transportation Management System (TMS) Warehouse Management System (WMS) Electronic Data Interchange (EDI) platforms June 9: SEC filing discloses “material operational disruption” June 11: Partial restoration of cold chain logistics systems [Diagram: UNFI System Architecture and Compromise Points] ...

In my current job, I’m one of the local resident Active Directory experts. Granted my knowledge is a little dated on the subject but I can still get around enough as needed. In order to perform testing, we need to spin up test environments for Active Directory and don’t want to maintain a long lived infrastructure for it. I was having to constantly spin these up by hand and thought there had to be a way to create a test active directory with Terraform. I was right! In addition to the active directory, I needed to be able to add member servers and I found this was all possible with Terraform. ...

I will admit that I’m quite a bit of a rookie when it comes to Terraform and the whole infrastructure as code scene but I’m learning. One of the most powerful tools I’ve found when trying to convert your current infrastructure into Terraform is the terraform import command. After too many times of doing an import and manually copying information from my state file, I felt there had to be a way to simplify Terraform import. ...

As I’ve been working with Terraform more and more these days, I felt that it would be a good idea to move away from some of my other hacked together solutions in favor of Terraform. My next logical step was to focus on kubernetes management with terraform and github actions. This idea builds upon my previous Using Github to Manage Kubernetes article. As I started down this path, I realized that I needed a way to manage my state file. This is why I thought it was important to tackle the configuration I posted in Managing Your Terraform State File. ...

I started messing with GitHub Actions a little more in my Using GitHub to Manage Kubernetes post. I also did some tinkering around with Terraform in my How to Use Terraform to Deploy a Python Script to AWS Lambda post. As I started messing with Terraform even more, I realized how cool it would be to merge Terraform and GitHub Actions. As I started to do this, I ran into the problem of how to manage Terraform state files. This appears to be a rather common problem too. ...