2026

• 24 Oct
• 24 Oct
• 18 Oct Sub-Second Guardrails: Using Strands Decider 2B as a Safety Circuit Breaker for Autonomous Cloud Ops
• 03 Oct Lockdown - Remediating Retrieval, Logging, and Tenant Isolation in RAG Systems
• 03 Oct UnIndexed - Auditing Enterprise RAG Access Boundaries and Boardroom Secrets
• 03 Oct Checkpoint - AI Supply Chain Candidate Evaluation
• 02 Oct Sensitive Information Disclosure in RAG - Vectors, Multi-Tenancy, and Access Boundaries
• 02 Oct Payload - AI Supply Chain Incident Forensics
• 02 Oct Data Poisoning in RAG Systems - Vectors, Ingestion Pipelines, and Behavioral Drift
• 02 Oct Securing the AI Supply Chain - Hardening Models and Dependencies
• 02 Oct RAG Security Fundamentals - Architecture, Attack Surfaces, and Context Manipulation
• 02 Oct Supply Chain Attack Vectors - Weaponizing ML Components
• 02 Oct Understanding AI Supply Chains - Threat Surfaces and Component Risks
• 02 Oct White Rabbit - Prompt Injection CTF Challenge
• 02 Oct LLMborghini - Indirect Prompt Injection Challenge
• 02 Oct TryHackMe: Prompt Defence
• 02 Oct TryHackMe: Jailbreaking
• 02 Oct TryHackMe: Prompt Injection
• 02 Oct TryHackMe: AI Threat Modelling Assessment
• 02 Oct TryHackMe: AI System Reconnaissance
• 02 Oct TryHackMe: AI Threat Modelling
• 02 Oct TryHackMe: LLM Security
• 02 Oct TryHackMe: Securing AI Systems
• 02 Oct TryHackMe: AI Forensics
• 02 Oct TryHackMe: Prompt Engineering
• 02 Oct TryHackMe: AI Models & Data
• 02 Oct TryHackMe: AI Security Threats
• 17 Sep TryHackMe: The Building Blocks of AI
• 08 Jul Lab Secrets Manager and KMS Key Abuse: When One Shared Key Decrypts Everything
• 07 Jul AWS Audit Manager, Artifact, and Compliance - Evidence and Assurance
• 06 Jul Lab CloudTrail Tampering and GuardDuty Evasion: How Attackers Go Dark
• 05 Jul AWS Firewall Manager and Resource Access Manager - Centralized Policy Enforcement
• 04 Jul Lab: Lambda Attack Chain: From API Gateway Injection to AWS Account Pivot
• 03 Jul AWS Organizations and Control Tower - Multi-Account Governance
• 02 Jul Lab: Cross-Account Role Chaining: One Compromised Account to Full Org Access
• 01 Jul Amazon Cognito and Verified Permissions - App Identity and Fine-Grained Authorization
• 30 Jun Lab: S3 Misconfiguration Deep Dive: Public Buckets, Presigned URLs, Terraform State, and Snapshot Exposure
• 29 Jun IAM Access Analyzer, STS, and Authorization Controls
• 28 Jun Lab: Kubernetes Pod Escape and IRSA Abuse: From Container to AWS Account
• 27 Jun AWS IAM Identity Center - SSO, Permission Sets, and Federated Access
• 26 Jun Lab: CI/CD Pipeline Attack: GitHub Actions Secret Theft and OIDC Hardening
• 25 Jun AWS Systems Manager and Network Security Controls
• 24 Jun Lab: IAM Privilege Escalation: 8 Paths from Low-Privilege to Admin
• 23 Jun AWS Secrets Manager and ACM - Credential Rotation and TLS Certificates
• 22 Jun Lab: SSRF to IMDS: Steal AWS Credentials Through a Web App
• 21 Jun AWS KMS - Key Management, Envelope Encryption, and CloudHSM
• 20 Jun Lab: EC2 Attack Chain: Reverse Shell, IMDS Credential Theft, and GuardDuty Detection
• 19 Jun AWS WAF, Shield, and Amazon Inspector - Edge Protection and Vulnerability Scanning
• 17 Jun Cloud Incident Response and Amazon Detective - IR Playbooks and Investigation
• 15 Jun AWS Security Hub and Amazon Macie - CSPM and Data Classification
• 14 Jun DevSecOps Labs: Index & Practical Roadmap
• 14 Jun Day 25: DevSecOps Posture Review - Connecting the Entire Security Stack
• 13 Jun AWS CloudTrail and AWS Config - Audit Logging and Compliance
• 13 Jun Day 24: CIS Benchmarks & Compliance - Auditing Cloud Baselines
• 12 Jun Day 23: Threat Modeling with STRIDE - Finding Architectural Flaws Early
• 11 Jun Amazon GuardDuty - Threat Detection, Finding Types, and Automation
• 11 Jun Day 22: Cloud Incident Response - Investigating Compromised AWS Workloads
• 10 Jun Day 21: Zero Trust Architecture - Beyond the Castle and Moat
• 09 Jun AWS CodePipeline and CodeBuild - CI/CD on AWS
• 08 Jun Lab: GuardDuty Sample Findings: What It Actually Detects (Zero Cost, Zero Risk)
• 07 Jun Day 19: Building a Secure CI/CD Pipeline - Shifting Security Left
• 06 Jun AWS CloudFormation and CDK - Infrastructure as Code
• 06 Jun Day 18: DAST with OWASP ZAP - Dynamic Web Application Security Testing
• 05 Jun MERN Web App Penetration Testing - Full Walkthrough
• 05 Jun Day 17: IaC Scanning with Checkov & tfsec - Catching Cloud Misconfigurations
• 04 Jun AWS DynamoDB - NoSQL, Keys, Indexes, Streams, and DAX
• 04 Jun Day 16: SCA with Snyk & Dependabot - Securing the Open Source Supply Chain
• 03 Jun Cloud-based IaC - Terraform, AWS CloudFormation, and Secure IaC Practices
• 03 Jun On-Premises IaC - Vagrant Provisioning, Ansible Automation, and Pipeline Exploitation
• 03 Jun Intro to IaC - Declarative vs Imperative, Lifecycle, and Virtualisation Primitives
• 03 Jun Day 15: SAST with Semgrep - Finding Vulnerabilities in Source Code
• 02 Jun Container Hardening - Daemon Protection, Cgroups Limits, Seccomp, AppArmor, and Grype Image Auditing
• 02 Jun AWS RDS and Aurora - Managed Relational Databases, Multi-AZ, and Read Replicas
• 02 Jun TryHackMe: One Piece Room Walkthrough
• 02 Jun Container Vulnerabilities - Breakouts via Privileged Capabilities, Docker Sockets, Exposed TCP, and Host Namespaces
• 01 Jun Intro to Kubernetes - Cluster Architecture, Declarative YAML, Kubectl Operations, and RBAC Hardening
• 31 May Intro to Docker - Image Lifecycle, Dockerfiles, Compose Orchestration, and Socket Architecture
• 31 May AWS EBS and EFS - Block Storage, Shared Filesystems, and FSx
• 31 May Intro to Containerisation - Docker Architecture, Linux Namespaces, and Process Isolation
• 29 May AWS S3 - Object Storage, Storage Classes, Security, and Replication
• 29 May Mother's Secret - Code Review, Route State Machine Exploitation, and Path Traversal in Node.js
• 27 May AWS ECS and EKS - Containers, Fargate, and Managed Kubernetes
• 27 May DAST - Dynamic Application Security Testing, OWASP ZAP, Authenticated Scans, and CI/CD Automation
• 25 May SAST - Static Application Security Testing, AST Modeling, Taint Analysis, and Semgrep Rules
• 24 May Homelab Part 9: Cloudflare Tunnel for Secure External Access
• 24 May AWS Lambda - Serverless Functions, Triggers, and Execution Model
• 24 May Homelab Part 8: Nextcloud Personal Cloud Storage
• 24 May Homelab Part 7: Jellyfin Self-Hosted Media Server
• 24 May Dependency Management - Supply Chain Attacks, S3 Skimmers, and Python Dependency Confusion
• 24 May Homelab Part 6: Persistent Storage with Longhorn
• 24 May Homelab Part 5: MetalLB and Nginx Ingress
• 24 May Homelab Part 4: K3s Single Node Kubernetes Setup
• 24 May Homelab Part 3: Internal DNS with AdGuard Home
• 24 May Homelab Infrastructure Breakdown: How It All Comes Together
• 24 May Homelab Part 2: VMware Setup and VM Planning
• 24 May Homelab Part 1: What I'm Building and Why
• 24 May Linux Networking: Full Reference
• 22 May AWS EC2 - Instances, AMIs, Storage, Auto Scaling, and Pricing
• 22 May CI/CD and Build Security - Pipeline Exploitation, Build Runner Poisoning, and Environment Segregation
• 21 May AWS VPC Architecture Patterns - Inbound, Outbound, and Inspection VPCs
• 20 May Source Code Security - Git Internals, Credential Hygiene, and Secrets Management in CI/CD
• 20 May Network Protocols Deep-Dive
• 19 May AWS VPC - Virtual Private Cloud Full Walkthrough
• 19 May Intro to Pipeline Automation - CI/CD Architecture, Build Agent Security, and Environment Segmentation
• 19 May Cloud Security & DevSecOps - Daily Study Plan
• 17 May AWS Global Infrastructure - Regions, AZs, and Edge Locations
• 17 May Secure Software Development Lifecycle (SSDLC) - Methodologies, Threat Modelling, and Testing Automation
• 16 May AWS Load Balancers - ALB, NLB, Target Groups, and Listeners
• 15 May Software Development Lifecycle (SDLC) - Phases, CALMS Framework, and Core Delivery Metrics
• 14 May Introduction to DevSecOps - Cultural Evolution, Shift-Left Security, and Pipeline Shared Responsibility
• 13 May AWS CloudFront - CDN, Distributions, Cache Policies, and Security
• 11 May AWS Route 53 - DNS, Routing Policies, and Health Checks
• 09 May AWS CLI & IAM - Credentials, Roles, Policies, and Attack Paths
• 08 May YAML & GitHub Actions Walkthrough
• 08 May Terraform Full Walkthrough
• 08 May Kubernetes Full Walkthrough
• 08 May Docker Full Walkthrough
• 06 May Phase 5: Observability & Security Hardening: CloudWatch, Secrets Manager, and Structured Logging
• 06 May Phase 4: CI/CD Pipeline with GitHub Actions: Complete Walkthrough
• 30 Apr Phase 3: Provisioning a 3-Tier AWS Network with Terraform: Walkthrough
• 30 Apr TryHackMe: Topic Rewind Recap - Storage and Data Security Walkthrough
• 29 Apr TryHackMe: The Shared Snapshot - Defending AWS Walkthrough
• 28 Apr TryHackMe: The Blind Bucket - Defending AWS Walkthrough
• 27 Apr TryHackMe: The Plain Bucket - Defending AWS Walkthrough
• 26 Apr TryHackMe: The Leaky Bucket - Defending AWS Walkthrough
• 25 Apr TryHackMe: Topic Rewind Recap - Securing Compute Walkthrough
• 24 Apr TryHackMe: The Oversharing Container - Defending AWS Walkthrough
• 23 Apr TryHackMe: The Leaky Metadata - Defending AWS Walkthrough
• 22 Apr TryHackMe: The Unpatched Instance - Defending AWS Walkthrough
• 21 Apr Phase 2: Containerizing a 3-Tier MERN Stack With Docker Compose: Walkthrough
• 21 Apr Chapter 9 Administration Calls
• 21 Apr TryHackMe: The Exposed Port - Defending AWS Walkthrough
• 20 Apr TryHackMe: Topic Rewind Recap (Module 3) - Defending AWS Walkthrough
• 19 Apr TryHackMe: The Invisible Network - Defending AWS Walkthrough
• 18 Apr TryHackMe: The Forgotten NACL - Defending AWS Walkthrough
• 17 Apr TryHackMe: The Not So Private Subnet - Defending AWS Walkthrough
• 15 Apr TryHackMe: Topic Rewind Recap (Module 2) - Defending AWS Walkthrough
• 14 Apr Phase 1: Building a Secure MERN Backend From a Firebase App - Walkthrough
• 14 Apr Chapter 8 Put on the Monitor's Cap
• 14 Apr TryHackMe: The Silence of the IAMs - Defending AWS Walkthrough
• 13 Apr TryHackMe: The Overpowered Role - Defending AWS Walkthrough
• 12 Apr TryHackMe: The Forgotten Access Key - Defending AWS Walkthrough
• 11 Apr TryHackMe: The Over-Privileged User - Defending AWS Walkthrough
• 10 Apr TryHackMe: Topic Rewind Recap (Module 1) - Defending AWS Walkthrough
• 09 Apr TryHackMe: Introduction to AWS Security Tools - Defending AWS Walkthrough
• 08 Apr Defending AWS: Introduction to Cloud Storage - S3 Architecture, Access Control, and Encryption Models
• 07 Apr Chapter 7 The Old-Boy Network
• 07 Apr Defending AWS: Introduction to Cloud Computing - EC2 Architecture, AMIs, and Immutable Workloads
• 06 Apr Defending AWS: Introduction to Cloud Networking - VPCs, Subnets, Gateways, and Traffic Isolation
• 05 Apr Defending AWS: Introduction to IAM - Identities, JSON Policy Anatomy, and Evaluation Logic
• 03 Apr Defending AWS: First Steps Into AWS - Console Navigation, CloudShell, and CLI Fundamentals
• 01 Apr Chapter 6 The Backup Plan
• 30 Mar Phase 0: Setting-Up-The-Infrastructure
• 30 Mar FYP Proposal - Research & Planning
• 25 Mar Windows Privilege Escalation & Rooting Windows Machines
• 25 Mar Chapter 5 Tangled Web Not At All
• 24 Mar Phase 0: MindCraft Overview
• 18 Mar Understanding & Fixing Exploits, Privilege Escalation (Part 2)
• 18 Mar Chapter 4 Texting and Driving
• 13 Mar Day 13: Runtime Security with Falco - Kernel-Level Threat Detection
• 12 Mar Day 12: Kubernetes RBAC & Pod Security - Hardening Cluster Workloads
• 11 Mar Antivirus Evasion & Privilege Escalation (Part 1)
• 11 Mar Chapter 3 File In, File Out
• 11 Mar Day 11: Container Scanning with Trivy - Finding CVEs Before Deploy
• 10 Mar Day 10: Docker Security Hardening - Breaking the Root Container Myth
• 09 Mar Day 9: HashiCorp Vault - Centralized Secrets and Dynamic Tokens
• 08 Mar Day 8: AWS Secrets Manager & Parameter Store - Securing Credentials
• 06 Mar Day 6: AWS WAF & Shield - Application Filtering and DDoS Defense
• 05 Mar Nmap commands note
• 05 Mar TryHackMe: LookUp Walkthrough
• 05 Mar Day 5: Amazon Inspector - Automated Cloud Vulnerability Scanning
• 04 Mar TShark: CLI Wireshark Features
• 04 Mar Locating & Fixing Exploits, Password Attacks
• 04 Mar Chapter 2 Have a Good Command
• 04 Mar Day 4: GuardDuty & Security Hub - Intelligent Threat Detection
• 04 Mar TryHackMe: RootMe Walkthrough
• 03 Mar HackTheBox: Conversor Walkthrough
• 03 Mar HackTheBox: Expressway Walkthrough
• 03 Mar Day 3: CloudTrail & AWS Config - API Auditing and Drift Detection
• 02 Mar TryHackMe: TShark Challenge I - Directory Curiosity Walkthrough
• 02 Mar Day 2: AWS Organizations & SCPs - Multi-Account Guardrails
• 02 Mar TShark: The Basics
• 01 Mar Day 1: Demystifying AWS IAM - Roles, Policies, and Least Privilege
• 25 Feb Chapter 1 Shell Something Out
• 20 Feb Reconnaissance, Scanning & Web Application Attacks
• 18 Feb TryHackMe: CMesS Walkthrough
• 14 Feb SQL Injection & Client-Side Attacks
• 14 Feb Linux CLI Notes
• 11 Feb OSCP Journey: Week 1 - Linux CLI Mastery, Bash Scripting, and Initial Reconnaissance