Skip to main content

Filed under

Vulnerability Management

7 entries

  1. Supply Chain 12 min read

    Patch Fast, Pull Slow: Defending in the Year of Copy Fail

    AI is finding bugs faster, researchers pile on the moment one drops, and registries ship malware by the hundred-thousand. Defenders are caught between two contradictory imperatives. The fix is architectural, not temporal.

  2. Supply Chain 15 min read

    Automated Security Scanning Pipeline with Grype and OSV

    Build automated security scanning pipelines with Grype, OSV, and Trivy—integrate vulnerability detection into CI/CD workflows with actionable reporting.

  3. Hardware 8 min read

    IoT Security in Your Home Lab: Lessons from OWASP IoTGoat

    Test IoT security with OWASP IoTGoat—practice firmware extraction, API exploitation, and hardware hacking in secure lab environments.

  4. Vulnerability Management 19 min read

    Building a Smart Vulnerability Prioritization System with EPSS and CISA KEV

    Prioritize vulnerabilities with EPSS and CISA KEV catalog—move beyond CVSS scores to risk-based patch management using exploitation probability metrics.

  5. Compliance 10 min read

    Vulnerability Management at Scale with Open Source Tools

    Build enterprise vulnerability management with open source: scanning, remediation tracking, and compliance using OpenVAS, Trivy, and Airflow.

  6. Vulnerability Management 10 min read

    Building a Python Vulnerability Scanner with NVD API Integration

    Automate vulnerability detection in your homelab using Python and the National Vulnerability Database API. Track CVEs, scan dependencies, and integrate with monitoring systems.

  7. Vulnerability Management 11 min read

    Writing Secure Code: A Developer’s Guide to Thwarting Security Exploits

    Master secure code development with input validation, parameterized queries, and secrets management—prevent SQL injection and XSS in production systems.