Thoughts on tech, projects, and things I find interesting.
A Chinese state-sponsored threat actor used Anthropic's Claude to autonomously breach Mexican government systems, stealing 150GB of sensitive data including 195 million taxpayer records.
AWS's FedRAMP 20x readiness blog reveals what's really underneath: GRC engineering. Here's why compliance evidence is an engineering byproduct.
AWS's 7-layer defense-in-depth architecture is functionally a blueprint for continuous Authority to Operate. GRC engineering and security engineering are converging, and AI is the accelerant.
The Department of War is moving away from static RMF assessments toward a continuous, code-driven risk practice. Here is what mission owners need to know about CSRMC.
General security best practices when trying to secure containers in your environment.
A demo of signing a container image using Cosign with a locally generated key and an AWS KMS key.
Learn about the importance of signing software artifacts using Cosign to help secure the software supply chain.
Tips and recommended materials used to pass the AWS Security Specialty exam.