community
Latest
Vaultwarden and HashiCorp Vault: Different Jobs in the Same Secrets Architecture
Yesterday I wrote about moving autonomous-agent secrets out of a flat .env file. Why I kept Vaultwarden for people and recovery, added HashiCorp Vault for workloads, and treated identity, audit, PKI, and tested recovery as part of the deployment rather than follow-up work.
Moving Autonomous Agent Secrets Out of .env
For a long time, my autonomous agent found credentials the same way many applications do. Why I replaced a flat environment file with scoped Vaultwarden access, short-lived agent sessions, and a verified audit trail that now reaches Graylog and Wazuh.
45Drives
·
The 45Drives Professional Pro15: Storage You Actually Own
Most of the storage I have bought across my career came from a few of the usual vendors, and most of it worked. It also came with things I could not source elsewhere, firmware that refused drives and software layer I paid for every year whether I used it or not. The Pro15 is a different animal...
Practice at Home the Way You Preach at Work
I spend my working hours telling teams how to do security well. Segment the network. Write the change down. Model the threat before you build the control. Then I go home, and if I am honest with myself, the temptation is to cut every one of those corners because it is "just the lab."
ATT&CK
·
Basics Series - #5 Firewall Configuration (OPNsense VM Configuration) Part 3
Welcome back to the Basics Series. In Basics Series - #3 we compared the firewall market, picked OPNsense for the lab, and installed it as a VM. In Basics Series - #4 we worked through the traditional vs. transparent-bridged decision and I promised a configuration walkthrough. This is that post...
Amazon
·
The Outermost Ring: Enterprise and Cloud Security — and the End of the Series
This installment goes in a different direction. Where the last post zoomed all the way in — past the running host, past the alert, down to a single line of source...stepping away from individual controls entirely and asks about the distributed, multi-platform enterprise the cloud produced.
Book
·
Four Tools, One Target: The Application Security Testing Labs in the Cybersecurity Architect's Handbook, Second Edition
We've climbed through the rings of the architecture... This installment goes further upstream than any of them. It steps back to the code itself — and asks how you find the flaw while it's still cheap to fix and it hasn't shipped yet. That's the domain at the heart of Application Security Testing.
Amazon
·
Every Seat in the SOC: The Incident Response and Investigation Labs in the Cybersecurity Architect's Handbook, Second Edition
This installment does something different. Every domain we've covered so far — even the unglamorous hygiene loop — was, at bottom, an attempt to keep the bad day from arriving. This one starts the morning after it did...
Amazon
·
Book Review: The Ultimate Ubuntu Handbook — A 24.04 Field Guide That Will Outlive 24.04
My lab runs Debian 13 as the primary environment, so when a 356-page Ubuntu book landed on my desk, my first instinct was to skim it, nod politely... Instead I read the whole thing — and I'm giving it five stars...
Amazon
·
The Unglamorous Loop That Decides Everything: Inside the Vulnerability and Configuration Management Labs
I've been working through the second edition of the Cybersecurity Architect's Handbook's "secret menu" one domain at a time...the controls that still mean something after everything else has fallen. This installment does something different...it looks down at the ground all of them are standing on.