Log4Shell (CVE-2021-44228): How One Logging Library Broke the Internet
A single JNDI lookup string turned every Java logger into a front door. The anatomy, response, and lasting lessons of Log4Shell.
Software Supply Chain Security for AI Agents and MCP Servers
A deep dive into securing AI agent supply chains — MCP server vetting, dependency integrity, sandboxing, and trust anchors for AI infrastructure.
Supply Chain Security: Risks in Dependencies, Builds & Secrets
Software Supply Chain Security: Risks in Dependencies, Builds, and Secrets
A practical guide to software supply chain security covering dependency risks, secrets exposure, CI/CD trust failures, artifact integrity verification, SBOM management, and real-world attack case studies.