corpus.blog
41554 blogs · [ { "id": "01a0953d-56f9-73fd-92a5-b61843fecf1f", "title": "Finding the Cryptominer Hiding in a Docker overlay2 Layer", "url": "https://rivassec.com/cryptominer-in-the-docker-layer.html", "published_at": "2026-09-11T16:00:00+00:00" }, { "id": "01a087d5-2d80-71e5-9900-26cc91858e28", "title": "When Telemetry Turns Predatory: A DevSecOps Look at Digital Repression in Venezuela", "url": "https://rivassec.com/telemetry-turns-predatory.html", "published_at": "2026-08-25T07:00:00+00:00" }, { "id": "01a087d5-2d80-71e5-9900-26cc91fa9f70", "title": "Testing an IAM Analyzer Against Its Own Claims", "url": "https://rivassec.com/testing-an-iam-analyzer-against-its-own-claims.html", "published_at": "2026-08-24T07:00:00+00:00" }, { "id": "01a087d5-2d80-71e5-9900-26cc9250ed5a", "title": "The DevSecOps Guide: Hardening, IAM, and Incident Response", "url": "https://rivassec.com/devsecops-guide.html", "published_at": "2026-08-15T07:00:00+00:00" }, { "id": "01a087d5-2d80-71e5-9900-26cc927b38ae", "title": "When the Output Carries the Signal: Claude, SynthID-Text, and the New Detection Attack Surface", "url": "https://rivassec.com/claude-synthid-text-watermark-attack-surface.html", "published_at": "2026-08-14T07:00:00+00:00" }, { "id": "01a087d5-2d80-71e5-9900-26cc934119eb", "title": "IAM Blast Radius Is an Architecture Problem, Not a Policy Problem", "url": "https://rivassec.com/iam-blast-radius-architecture-problem.html", "published_at": "2026-07-21T07:00:00+00:00" }, { "id": "01a087d5-2d80-71e5-9900-26cc94048565", "title": "The Discovery Layer Is Broken: Hiring as an Observability Problem", "url": "https://rivassec.com/hiring-discovery-layer-broken.html", "published_at": "2026-07-11T07:00:00+00:00" }, { "id": "01a087d5-2d80-71e5-9900-26cc94d985b1", "title": "Prompt Injection Will Become a Supply Chain Evasion Technique", "url": "https://rivassec.com/prompt-injection-supply-chain-evasion.html", "published_at": "2026-06-12T07:00:00+00:00" }, { "id": "01a087d5-2d80-71e5-9900-26cc95614f78", "title": "Bandit-Clean Pwnagotchi Plugins: How `subprocess` Goes From Risk to Routine", "url": "https://rivassec.com/pwnagotchi-plugin-bandit-hardening.html", "published_at": "2026-06-10T07:00:00+00:00" }, { "id": "01a087d5-2d80-71e5-9900-26cc95eb1fbe", "title": "TLS Has Three Jobs. Forget the Rest.", "url": "https://rivassec.com/tls-three-jobs.html", "published_at": "2026-06-04T07:00:00+00:00" }, { "id": "01a087d5-2d80-71e5-9900-26cc96d54a04", "title": "Adoption Is a Security Control: Notes from Paving a Road", "url": "https://rivassec.com/paved-road-adoption-as-control.html", "published_at": "2026-05-21T07:00:00+00:00" }, { "id": "01a087d5-2d80-71e5-9900-26cc973f6301", "title": "The Teensy That Failed in Public: An EFI Brute Force, Hours Late", "url": "https://rivassec.com/teensy-efi-bruteforce-hours-late.html", "published_at": "2026-05-21T07:00:00+00:00" }, { "id": "01a087d5-2d80-71e5-9900-26cc982eb0eb", "title": "IAM Roles That Fail Loud: Small Defaults, Big Difference", "url": "https://rivassec.com/iam-safe-defaults-fail-loud.html", "published_at": "2026-05-12T07:00:00+00:00" }, { "id": "01a087d5-2d80-71e5-9900-26cc98f0acc1", "title": "The Trust Decay: Why Modern Hiring Has Become an Adversarial System", "url": "https://rivassec.com/trust-decay-adversarial-hiring.html", "published_at": "2026-05-04T07:00:00+00:00" }, { "id": "01a087d5-2d80-71e5-9900-26cc98f53083", "title": "Never Lose Connection: Multi-Phone Bluetooth Tethering for Pwnagotchi", "url": "https://rivassec.com/pwnagotchi-bluetooth-tethering.html", "published_at": "2025-07-22T07:00:00+00:00" }, { "id": "01a087d5-2d80-71e5-9900-26cc99af0711", "title": "Elasticsearch Snapshot Verification, Minimal Privileges", "url": "https://rivassec.com/elasticsearch-secure-snapshot-verification.html", "published_at": "2025-04-20T07:00:00+00:00" }, { "id": "01a087d5-2d80-71e5-9900-26cc9a6365b1", "title": "Hardening Kubernetes Deployments", "url": "https://rivassec.com/hardening-k8s.html", "published_at": "2025-04-19T07:00:00+00:00" }, { "id": "01a087d5-2d80-71e5-9900-26cc9ad27241", "title": "Taming the OOM Killer: Process Priorities on Linux", "url": "https://rivassec.com/oom-killer-process-prioritization.html", "published_at": "2025-04-18T07:00:00+00:00" }, { "id": "01a087d5-2d80-71e5-9900-26cc9b8d12da", "title": "Catching a Nation-State Proxy: OSINT on Twitter", "url": "https://rivassec.com/venezuela-twitter-proxy-osint.html", "published_at": "2025-04-17T07:00:00+00:00" }, { "id": "01a087d5-2d80-71e5-9900-26cc9bc74ee8", "title": "The 208.5-Day Kernel Bug: Uptime, Overflow, and Risk", "url": "https://rivassec.com/208-day-kernel-bug-lessons.html", "published_at": "2025-04-16T07:00:00+00:00" }, { "id": "01a087d5-2d80-71e5-9900-26cc9c9d11ea", "title": "The 2012 Leap Second: When Time Broke Java and the Cloud", "url": "https://rivassec.com/leap-second-chaos-2012.html", "published_at": "2025-04-15T07:00:00+00:00" } ] posts Claim your blog
Back to rivassec.com
Blog · corpus.blog/blogs/rivassec.com/posts

rivassec.com

rivassec.com

2026

Finding the Cryptominer Hiding in a Docker overlay2 Layeroriginal ↗
11 Sept 2026
When Telemetry Turns Predatory: A DevSecOps Look at Digital Repression in Venezuelaoriginal ↗
25 Aug 2026
Testing an IAM Analyzer Against Its Own Claimsoriginal ↗
24 Aug 2026
The DevSecOps Guide: Hardening, IAM, and Incident Responseoriginal ↗
15 Aug 2026
When the Output Carries the Signal: Claude, SynthID-Text, and the New Detection Attack Surfaceoriginal ↗
14 Aug 2026
IAM Blast Radius Is an Architecture Problem, Not a Policy Problemoriginal ↗
21 Jul 2026
The Discovery Layer Is Broken: Hiring as an Observability Problemoriginal ↗
11 Jul 2026
Prompt Injection Will Become a Supply Chain Evasion Techniqueoriginal ↗
12 Jun 2026
Bandit-Clean Pwnagotchi Plugins: How `subprocess` Goes From Risk to Routineoriginal ↗
10 Jun 2026
TLS Has Three Jobs. Forget the Rest.original ↗
4 Jun 2026
Adoption Is a Security Control: Notes from Paving a Roadoriginal ↗
21 May 2026
The Teensy That Failed in Public: An EFI Brute Force, Hours Lateoriginal ↗
21 May 2026
IAM Roles That Fail Loud: Small Defaults, Big Differenceoriginal ↗
12 May 2026
The Trust Decay: Why Modern Hiring Has Become an Adversarial Systemoriginal ↗
4 May 2026

2025

Never Lose Connection: Multi-Phone Bluetooth Tethering for Pwnagotchioriginal ↗
22 Jul 2025
Elasticsearch Snapshot Verification, Minimal Privilegesoriginal ↗
20 Apr 2025
Hardening Kubernetes Deploymentsoriginal ↗
19 Apr 2025
Taming the OOM Killer: Process Priorities on Linuxoriginal ↗
18 Apr 2025
Catching a Nation-State Proxy: OSINT on Twitteroriginal ↗
17 Apr 2025
The 208.5-Day Kernel Bug: Uptime, Overflow, and Riskoriginal ↗
16 Apr 2025
The 2012 Leap Second: When Time Broke Java and the Cloudoriginal ↗
15 Apr 2025