Letting Gordon migrate your Dockerfile to DHI:

How Docker's Gordon AI assistant migrates Dockerfiles to Docker Hardened Images, what permissions it requests, and what to verify before approving.What Gordon actually does to your Dockerfile when you ask it to migrate to Docker Hardened Images, and what to check before you approve any of it.

Docker Hardened Images migration

How to move a Python service from a Docker Official Image to a Docker Hardened Image without breaking package installs, root permissions, or your entrypoint. A practical Docker Hardened Images migration guide covering missing shells, nonroot permissions, port binding, and multi-stage Dockerfile fixes.

The FIFA World Cup Bug Wasn't About FIFA

How a public FIFA registration form exposed World Cup broadcast controls, and how to test your own APIs for the same client-side authorization flaw.

How a Single Photo Can Silently Own Your Mac via ExifTool

CVE-2026-3102 lets attackers hide shell commands inside image metadata and execute them on macOS via ExifTool 13.49. Here's exactly how it works and how to fix it.

Take Care of Your Agent

Agentic AI security for CISOs and architects: MCP vulnerabilities, OWASP Agentic Top 10, Anthropic's espionage case study, and NHI governance controls

Your IDE Just Got Pwned: The Nx Console Supply Chain Attack

Nx Console v18.95.0 was compromised via a stolen GitHub token on May 18, 2026. Learn what the payload did, IoCs to check, and how to fully recover

Locking Down VS Code Extensions in the Enterprise — Lessons from the GitHub Breach

How GitHub got breached via VS code malicious extensions, how to prevent it

TLS Automation Isn't Optional Anymore. Here's What That Means for Your Stack.

TLS certificate Automation

Docker Agent: Building Your Own AI Agent Teams from the Terminal

A practical guide to what is a Docker Agent — the open-source framework for building AI agent teams. Includes working YAML configs, filesystem and shell toolsets, model provider options, and a full coding agent walkthrough.

Docker Scout Security Policy: A Technical Deep Dive

A technical guide to Docker Scout's Policy Evaluation — covering all nine policy types, real Dockerfile and CI/CD code snippets, and how to enforce supply chain security automatically in GitHub Actions and GitLab pipelines.

NDR vs. EDR vs. XDR: A Deep Technical Breakdown for Security Engineers

Most teams deploy EDR and call it done. This breakdown covers what NDR, EDR, and XDR each actually see, where they go blind without each other, and how to stack them based on your SOC's maturity.

Your AI Agent Just Exfiltrated Your SSH Keys. You Approved It.

Exploring the security implications when AI agents have access to sensitive credentials and how approval workflows can inadvertently enable data exfiltration.

Logic App vs Security Copilot

Let's understand Sentinel Auth Method Won't Wake You at 3 AM?

Sentinel Authentication:you're probably doing it wrong?

Let's understand Sentinel Auth Method Won't Wake You at 3 AM?

Email Security is broken?

Logic Behind D3-SRA

MadeYouReset' HTTP/2 Vulnerability (CVE-2025-8671) Explained

beyond HHTP/2 Security

SIEM Done Right:3stage RoadMap

I've seen hundreds of SIEM deployments fail, Here's what actually works. The 3 stages roadmap for SIEM deployement for cybersecurity or SOC team

Terraform's Secret Weapon: Write Only Arguments

Let's understand what's new write only arguments in terraform 1.11, how IaaC engineers no need to store secrets in state file

When Snyk Saved my Firebase Project

Let's understand uncontrolled resource consumption vulnerability

How Snyk broker solves the Enterprise Integration Puzzle?

Let's understand what is Snyk Broker and how it's solving enterprise problems

DNS4EU vs Cloudflare: Europe's Sovereign DNS Resolver — An Honest Security Review

DNS4EU went live in June 2025 as Europe's first sovereign DNS resolver. This technical review covers its 5 resolver configs, Whalebone threat intel, GDPR compliance, and real performance vs Cloudflare 1.1.1.1.

Be a Detective with AWS Detective

Let's deep dive into AWS Detective services

Stop Fighting Local LLMs:Docker Just fixed the Mess

Run LLM with Docker Model Runner

Ship AI Tools Like Apps with Docker's MCP ToolKit

Leverage Docker to build production ready MCP

Build Your Own IOC Playground with ELastic SIEM

Let's learn how to hunt Threat adversory

MPIC for All:An Open Approach to Certificate Security

Let's learn what's beyond the HTTPs

Is Your SSH Port a Security Time Bomb? Understanding Wazuh Audit Insights

Learn how default SSH configurations, such as using port 22, can expose your system to security risks. This blog dives into Wazuh audit insights and provides actionable steps to strengthen your Unix-based system's defenses. Stay ahead of attackers with smarter configurations!

Trust boundary vs Attack Surface Explained

Let's get concept clear what's Log analytics and log analytics workspace

Effortless Wazuh v4.10.0 upgrade using Docker

In this section we'll see how effortlessly we can upgrade wazuh from v4.9.0 to v10.0 using docker in kali linux

The Best Way to Fool Yourself:Use SMS 2FA

Let's get concept clear what's Log analytics and log analytics workspace

Log Analytics vs Log Analytics Workspace in Microsoft Sentinel: The Real Difference Explained

Confused between Log Analytics and Log Analytics Workspace in Microsoft Sentinel? Clear breakdown of the architectural difference, cost implications, and correct deployment setup.

Wazuh vs Elasticsearch: Why Wazuh Moved to OpenSearch and What It Means for Your SIEM

Wazuh dropped Elasticsearch for OpenSearch at v4.3 due to SSPL licensing. Here is why it happened, what changed technically, and how to choose between Wazuh and Elasticsearch for your SIEM.

Streamline Security :Wazuh in Docker with Kali

Enhance your security operations with wazuh for real time threat detection and complicane using open source SIEM wazuh using docker with kali.

Why new session should be created during user authentication?

In this section we'll see importance of session cookies, browsers request handling and security authentication

Automate Multiple Login failure alerts

In this section we'll cover up basic but important challange faced by SOC analyst bu automating the multiple login failure alerts response

How to Install Kali Purple SOC Tools on Existing Kali Linux (Step-by-Step 2026)

Step-by-step guide to install Kali Purple SOC tools on existing Kali Linux. Covers all 5 NIST framework tools: Identify, Protect, Detect, Respond, Recover — no fresh install needed.

Live without passwords

This is FIDO 2 Protocol which helps organisation,end users to adopt passwordless mindset with passkeys.

How to integrate Docker Scout with Azure Container Registry

This blog is about how to integrate docker scout with ACR(Azure Container Registry)

Tools that SOC/Security Analyst must know

This is curated list of awesome Security Analyst tool used by SOC/Security Analyst.

How to install ThreatMapper in Kali Linux?

This is to install Open source CNAPP tool Threat Mapper in Kali Machine

How to onboard your first Microsoft sentinel SIEM tool?

This is all about how to configure Microsoft Sentinel environment with Log Analytics workspace

Microsoft Defender for Cloud 101

let's understand what makes Microsoft Defender for cloud unique as CNAPP tool

What is Microsoft Defender Threat Intelligence

Automatically send email with attachment via Microsoft logic apps and Blob storage

Automate Email with Azure Logic App

Automatically send email with attachment via Microsoft logic apps and Blob storage

How to create & Manage users and Groups within Azure AD.

Atomatically deploy your webapps with Github actions and firebase hosting with Jekyll templates

Automate Firebase hosting with Github Actions and Ruby.

Atomatically deploy your webapps with Github actions and firebase hosting with Jekyll templates

Search engines one should know as a CyberSecurity enthausist!

This is a curated list of all types of search engines as a cybersecurity one should explore !

What is chatGpt? How to use it?

What is the difference between Kali Linux and Parrot os. Which is good for beginers and pro in cyber security and why do we need both?

Do you use ls -lrt?

What is the use of ls -lrt?

Kali Linux vs Parrot OS

What is the difference between Kali Linux and Parrot os. Which is good for beginers and pro in cyber security and why do we need both?

Blue Team vs Red Team

What is the difference between Blue and Red Team in cyber security and why do we need both?

WAF vs IPS

What is the difference between WAF and IPS system and why do we need both?

WAF vs Firewall

This is the series of cloud security . Anyone can learn this series, start exploring and learn cloud security.

College to Cyber Security Journey

This is the series of cloud security . Anyone can learn this series, start exploring and learn cloud security.

Metasploit Framework vs Metasploit Pro

This is the series of cloud security . Anyone can learn this series, start exploring and learn cloud security.

Building and Deploying PWA on Azure Cloud.

Let's build and deploy PWA over azure cloud from Scratch.

Access Management 101.

Beasic understandings of Access Management and AAA concept.

Automate Twitter via github Actions.

How you ever seen add to home screen or install popup on .

Progressive WebApp.

How you ever seen add to home screen or install popup on .

The Blue Team.☠️

In cybersecurity, we have our own form of tackel box. We have our own versions of wiggly things.Let's learn few of the frameworks,tools and term from the cybersecurity together.

Managing and Storing Secrets:Azure Vault.🙆

This is fundamental blog of how to manage and store secrets like certificates, passwords using Azure vault .

Protection against Security threat on Azure.☠️

This is fundamental blog of network security 101 with role as an azure developer,solution architect,administrator requires knowledge of the foundations of networking.

Fundamentals of Network Security.☠️

This is fundamental blog of network security 101 with role as an azure developer,solution architect,administrator requires knowledge of the foundations of networking.

Computer Networking 101

Learn basics of Computer Netoworking with hugs4bugs.The best beginers computer networking solution.

Anyone can build: node.js+ Cosmos DB in Azure

How to build and deploy A MERN stack application on Microsoft azure from scratch step-by-step.Best Steps for beginers 101.

Linux Cheat Sheet 101

Best Linux cheat sheet for begineer to advance level.

Azure Networking 101

What is docker and how to learn fast.

Docker 101

What is docker and how to learn fast.

Benifits of CI/CD

How to use Continuous integration and Delivery in our project.

Automation with Jenkins and GitHub

How to automate a project with Jenkins and Github

How to like Instagram posts with JavaScript?

how to increase instagram follower using script to add like counts.

How to install JENKINS on Linux ?

what is jenkins and how to install in our system.How to use it in our project