I recently read an interesting report by CyCognito on the top 3 vulnerabilities on third-party products and it sparked my interest to reexamine the supply chain risks in software engineering. This article is an attempt at that. The Vulnerability Trifecta in Third-Party Products The CyCognito report identifies three critical areas where third-party products introduce significant … Read more
Note: I started this article last weekend to try and explain the attack path “Midnight Blizzard” used and what Azure admins should do to protect themselves from a similar attack. Unfortunately, I couldn’t complete/publish it in time and now there is another breach at Microsoft. (🤦🏿) Now, I had to completely redraft it and change … Read more
Background: I work with multiple CTOs and Heads of Engineering of early-stage startups to help them set up their engineering orgs, review their product architecture, help them prioritise their hiring etc. I also help multiple engineering leaders via Plato. Recently, there have been too many questions on whether can I use ChatGPT for this or … Read more
Some say that NoOps is the end of DevOps. Is that really true? If you need to answer this question, you must first understand NoOps better. Things are moving at warp speed in the field of software development. You can subscribe to almost anything “as a service” be it storage, network, computing, or security. Cloud … Read more