Post-Quantum Cryptography — The Migration Clock Is Ticking
··861 words·5 mins
NIST’s post-quantum cryptography standards are finalized, and the migration timeline is no longer theoretical — it’s operational.
- Osmond van Hemert — Senior Software Engineer & Applied AI/
- Blog Tags: Software Development, AI, Security & Infrastructure/
- Cybersecurity Across Software & Cloud/
Cybersecurity Across Software & Cloud
Cybersecurity is not confined to incident reports. This tag follows threats and defenses across software dependencies, cloud platforms, developer tooling, and operational practice. Browse the list below when you want the security angle on those topics, even when security is not the post’s primary category.
For articles organized primarily as security analysis, use the Security category. To follow a particular threat pattern, explore the Supply Chain Security series.
Ultralytics Supply Chain Attack — Dependencies Bite Back
··969 words·5 mins
A supply chain attack on the popular Ultralytics YOLO package highlights the persistent vulnerability of the Python ecosystem’s distribution pipeline.
The Zero-Day Treadmill — Why Patch Tuesday Still Matters in 2025
··888 words·5 mins
November’s Patch Tuesday brought critical zero-days being actively exploited, reminding us that patch management is still the unglamorous foundation of
Secure by Design — CISA's Push Is Finally Gaining Real Traction
··865 words·5 mins
CISA’s Secure by Design initiative is moving from voluntary pledges to measurable industry impact, and software vendors are starting to feel the pressure.
EU ChatControl Is Back — And It's Still a Terrible Idea
··1074 words·6 mins
The EU’s latest push to scan encrypted messages reignites the fundamental debate about whether governments can mandate backdoors without destroying security
AWS re:Inforce 2025 — Cloud Security Gets Serious About AI
··891 words·5 mins
AWS re:Inforce 2025 puts AI workload security front and center, with new guardrails, identity controls, and data protection features that signal where cloud
NPM Supply Chain Attacks — The Problem That Won't Go Away
·1108 words·6 mins
Another wave of malicious npm packages reminds us that JavaScript’s dependency ecosystem remains one of software’s biggest security challenges.
The Spring 2025 Exploit Wave — Fortinet and Ivanti Under Fire
··977 words·5 mins
A surge of active exploitation targeting Fortinet and Ivanti edge devices highlights the persistent vulnerability of network perimeter infrastructure.
IngressNightmare — Critical Kubernetes NGINX Vulnerability Found
··1003 words·5 mins
CVE-2025-1974 and related vulnerabilities in the Kubernetes ingress-nginx controller allow unauthenticated remote code execution, affecting an estimated 40% of
The tj-actions Supply Chain Attack — Your CI/CD Is the Target
··920 words·5 mins
A compromised GitHub Action exposed secrets from thousands of repositories, highlighting how CI/CD pipelines have become prime targets for supply chain attacks.
Kubernetes 1.33 and the Container Security Hardening Push
··1138 words·6 mins
With Kubernetes pushing security features to GA and CISA issuing container hardening guidance, the container ecosystem is growing up on security.
Salt Typhoon and the Treasury Breach — State Hacking Hits Home
··950 words·5 mins
The Chinese state-sponsored Salt Typhoon campaign breached the US Treasury Department, exposing how even the most security-conscious organizations remain