My Ubuntu-based development laptop appears to have been infected by malware after working with a cloned Node.js project. The machine uses nvm, pnpm, VS Code, an AI coding…
We have a team of about 10 developers, and Terraform manages our infrastructure. The only exception is Pulumi, which connects through a bastion host to create users in…
I'm trying to understand what remains after replacing long-lived cloud credentials with workload identity and OIDC. Using identities for services like AWS or S3 seems to eliminate a…
Our managed service provider's remote monitoring and management vendor was reportedly breached, and our environment was hit with ransomware. The investigation is still underway, so we are currently…
Our managed service provider's remote-management vendor appears to have been breached, and our environment was subsequently hit with ransomware. The investigation is still underway, so we are waiting…
Our secrets have accumulated in several places over the past year: a few repositories, .env files, Jenkins credentials, and developers' laptops. I want to fix this before it…