Kubernetes attack chain: from path traversal to secret escalation
A walkthrough of the hackArcana Q2 2026 Kubernetes challenge — four steps from a vulnerable file parameter to full secret access inside a cluster, with defensive notes at each stage.
Blog
Articles and notes on identity, security, and cloud architecture.
Zero Trust in Hybrid Identity Environments: What Actually Works
Implementing Zero Trust in environments where Active Directory still runs and Entra ID sits on top — where the friction lives and what actually moves the needle.