Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Tue, 17 Oct 2023 00:18:30 GMT
———————————————
✏️Title: FAR Cyber compliance proposal: Requirements and Implications
———————————————
📎Link: https://medium.com/p/70b2e2deb466
———————————————
Tags: #compliance #cisa #executive_order #sbom #cybersecurity

Medium

FAR Cyber compliance proposal: Requirements and Implications

Executive Order 14028 — Executive Order on Improving the Nation’s Cybersecurity — kicked off a series of actions with the goals of:

10 views02:02

Daily Writeups

⤷ Title: CENTRIS: Uncovering Hidden Vulnerabilities in OSS Through Modified Code Reuse Detection
════════════════════════
𐀪 Author: Roger Neal
════════════════════════
ⴵ Time: Mon, 13 Jan 2025 19:16:08 GMT
════════════════════════
⌗ Tags: #application_security #sbom #secure_coding #software_development

Medium

CENTRIS: Uncovering Hidden Vulnerabilities in OSS Through Modified Code Reuse Detection

Open-source software (OSS) has transformed software development, providing access to powerful components that save time and resources. But…

16 views20:04

Daily Writeups

⤷ Title: Cybersecurity 101 Part 4: Securing your software.
════════════════════════
𐀪 Author: Celestine Emmanuel
════════════════════════
ⴵ Time: Fri, 07 Feb 2025 18:27:27 GMT
════════════════════════
⌗ Tags: #insurance #fantastic_four #cybersecurity #sbom #mitre_attack

Medium

Cybersecurity 101 Part 4: Securing your software.

After securing data in servers, we might focus on application security.

19 views19:05

Daily Writeups

⤷ Title: From Shift-Left to Always-On: AI-Driven DevSecOps at Every Git Commit
════════════════════════
𐀪 Author: Ali AL-halabyah
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 10:18:31 GMT
════════════════════════
⌗ Tags: #cybersecurity #zero_trust #sbom_generation #devsecops #sbom

Medium

From Shift-Left to Always-On: AI-Driven DevSecOps at Every Git Commit

Introduction

26 views11:07

Daily Writeups

⤷ Title: xeol: scanner for end-of-life software in container images, filesystems, and SBOMs
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 00:56:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Assessment #container images #filesystems #SBOM

Penetration Testing Tools

xeol: scanner for end-of-life software in container images, filesystems, and SBOMs

xeol is a scanner for end-of-life (EOL) packages in container images, filesystems, and SBOMs

24 views02:03

Daily Writeups

⤷ Title: SBOM (Software Bill Off Materials) in Security
════════════════════════
𐀪 Author: Natarajan C K
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 18:26:05 GMT
════════════════════════
⌗ Tags: #browsers #sbom #security #bug_bounty #web_applications

Medium

SBOM (Software Bill Off Materials) in Security

In the ever-evolving world of cybersecurity, Software Bill of Materials (SBOM) has become a buzzword. But what is it, and why does it…

19 views20:04

Daily Writeups

⤷ Title: Introducing Labrador LLM: The First AI Foundation Model Built for Software Supply Chain Security
════════════════════════
𐀪 Author: Roger Neal
════════════════════════
ⴵ Time: Tue, 03 Jun 2025 19:31:36 GMT
════════════════════════
⌗ Tags: #sbom #open_source_compliance #software_supply_chain #generative_ai_solution #application_security

Medium

Introducing Labrador LLM: The First AI Foundation Model Built for Software Supply Chain Security

In the dynamic landscape of software development, open-source software has become indispensable-but it’s also introduced profound legal and…

22 views20:04

Daily Writeups

⤷ Title: Using SBOMs To Keep a Government Website More Secure
════════════════════════
𐀪 Author: CivicActions
════════════════════════
ⴵ Time: Wed, 02 Jul 2025 12:26:50 GMT
════════════════════════
⌗ Tags: #design_and_tech #devsecops #sbom #digital_service #cybersecurity

Medium

Using SBOMs To Keep a Government Website More Secure

By Scott McGee, Senior DevSecOps Engineer

11 views13:04

Daily Writeups

⤷ Title: Using SBOMs to detect possible Dependency Confusion
════════════════════════
𐀪 Author: Dmitry Protsenko
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 02:34:25 GMT
════════════════════════
⌗ Tags: #devsecops #sbom #cybersecurity #trivy #supply_chain

Medium

Using SBOMs to detect possible Dependency Confusion

Learn how to leverage CycloneDX SBOMs and automated registry checks to detect and prevent dependency confusion attacks by identifying…

11 views03:04

Daily Writeups

⤷ Title: Intelligent SBOM Ingestion and Breaking Change Analysis
════════════════════════
𐀪 Author: ActiveState
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 17:35:45 GMT
════════════════════════
⌗ Tags: #software_supply_chain #devops #application_security #software_development #sbom

Medium

Intelligent SBOM Ingestion and Breaking Change Analysis

Another Slack alert. “Critical vulnerability detected: CVE in package X.” You pull up the advisory…and unfortunately, it’s legit: publicly…

14 views19:04

Daily Writeups

⤷ Title: Rust Crates Security Analysis: From Solo Dev to Supply Chain Defender
════════════════════════
𐀪 Author: Mohammad Abir Abbas
════════════════════════
ⴵ Time: Sat, 27 Sep 2025 15:31:45 GMT
════════════════════════
⌗ Tags: #software_development #supply_chain #cybersecurity #rust #sbom

Medium

Rust Crates Security Analysis: From Solo Dev to Supply Chain Defender

Rubel was a solo Rust developer, grinding late nights on her passion project. Her code compiled cleanly, tests passed — yet she couldn’t…

14 views16:04

Daily Writeups

⤷ Title: Building CERT-In Compliant SBOMs: A Complete Guide to Software Bill of Materials for Indian…
════════════════════════
𐀪 Author: sumit singh
════════════════════════
ⴵ Time: Sat, 27 Sep 2025 20:27:10 GMT
════════════════════════
⌗ Tags: #devsecops #cybersecurity #sbom

Medium

Building CERT-In Compliant SBOMs: A Complete Guide to Software Bill of Materials for Indian Cybersecurity Standards

How to create, sign, and manage Software Bill of Materials (SBOMs) that meet CERT-In Technical Guidelines v2.0 for secure and transparent…

13 views22:04

Daily Writeups

⤷ Title: CERT-In SBOM Compliance Made Easy: Introducing the CERT-In SBOM Mapper (Part 2)
════════════════════════
𐀪 Author: sumit singh
════════════════════════
ⴵ Time: Sun, 05 Oct 2025 17:02:36 GMT
════════════════════════
⌗ Tags: #devsecops #cybersecurity #sbom

Medium

CERT-In SBOM Compliance Made Easy: Introducing the CERT-In SBOM Mapper (Part 2)

In my previous article, I walked through the challenges of building CERT-In compliant SBOMs and why they matter for Indian cybersecurity…

10 views18:04

Daily Writeups

⤷ Title: The End of Insecure Pulls: Docker Open Sources Its Hardened Images Catalog
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:16:19 +0000
════════════════════════
⌗ Tags: #Technology #AI Infrastructure #Apache 2.0 #Container Security #DevOps #DHI #Docker #Helm #Kubernetes #open source #SBOM #SLSA #Supply Chain

Penetration Testing Tools

The End of Insecure Pulls: Docker Open Sources Its Hardened Images Catalog

Docker has announced that its Docker Hardened Images (DHI) are now free and fully open: they can be

23 views04:04

Daily Writeups

⤷ Title: SBOMs vs Asset Inventories: Bridging the Visibility Gap in Software Security
════════════════════════
𐀪 Author: Praveen Malhan
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 00:48:21 GMT
════════════════════════
⌗ Tags: #sbom #open_source_security #asset_inventory #supply_chain_security #application_security

Medium

SBOMs vs Asset Inventories: Bridging the Visibility Gap in Software Security

Introduction

19 views02:06

Daily Writeups

⤷ Title: Ghosted No More: CISA Unleashes BOD 26-02 and OpenEoX to Kill the “End-of-Life” Security Gap
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 16:10:28 +0000
════════════════════════
⌗ Tags: #Information Security #BOD 26_02 #CISA #CSAF #cybersecurity compliance #End of Life #EOL security #JSON schema #OpenEoX #perimeter defense #SBOM #Tech News 2026

Penetration Testing Tools

Ghosted No More: CISA Unleashes BOD 26-02 and OpenEoX to Kill the "End-of-Life" Security Gap

The proliferation of “abandoned” technologies at the periphery of corporate networks has increasingly evolved into an auspicious point

25 views17:03

Daily Writeups

⤷ Title: Understanding Modern Cybersecurity Practices for Scalable SaaS Protection
════════════════════════
𐀪 Author: Black Lock
════════════════════════
ⴵ Time: Wed, 25 Feb 2026 11:25:59 GMT
════════════════════════
⌗ Tags: #sbom_scanner #penetration_testing #vulnerability_scanning #static_code_scanning

Medium

Understanding Modern Cybersecurity Practices for Scalable SaaS Protection

In the digital-first era, cybersecurity has become a foundational requirement for businesses operating in cloud and SaaS environments. As…

18 views13:04

Daily Writeups

⤷ Title: Supply Chain Shield: How DepConfuse Proactively Stops Dependency Confusion Attacks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 09:24:16 +0000
════════════════════════
⌗ Tags: #Open Source Tool #cybersecurity tools #CycloneDX #DepConfuse #Dependency Confusion #DevSecOps #open source security #PURL #SBOM #Software Composition Analysis #Supply Chain Security

Penetration Testing Tools

Supply Chain Shield: How DepConfuse Proactively Stops Dependency Confusion Attacks

Stop dependency confusion before it starts. DepConfuse is an SBOM-first tool that scans 20+ registries to secure your software supply chain from package takeover.

16 views11:04

Daily Writeups

⤷ Title: Beyond the Dashboard: Apertis 2026 Debuts as the GPLv3-Free Powerhouse for Industrial IoT
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 02 Apr 2026 07:50:35 +0000
════════════════════════
⌗ Tags: #Linux #Apertis 2026 #Automotive Linux #Collabora #Debian 13 #embedded systems #GPLv3_free #Industrial Linux #IoT Security #OSTree #Rust uutils #SBOM #Wayland

Penetration Testing Tools

Beyond the Dashboard: Apertis 2026 Debuts as the GPLv3-Free Powerhouse for Industrial IoT

Collabora has unveiled the Apertis 2026 Linux distribution, a platform originally forged for automotive ecosystems that has since

9 views13:07

Daily Writeups

⤷ Title: TryHackMe AI Security Path — Checkpoint Walkthrough
════════════════════════
𐀪 Author: Jose A Ruiz Marquez
════════════════════════
ⴵ Time: Sat, 30 May 2026 16:41:08 GMT
════════════════════════
⌗ Tags: #ai #supply_chain #supply_chain_attack #tryhackme #sbom_security

Medium

TryHackMe AI Security Path — Checkpoint Walkthrough

AI Supply Chain Security, Governance Drift, and the Failure of Trust Boundaries

26 views17:04

About

Blog

Apps

Platform