A blog by Diego Comas on practical cloud native security, focused on Kubernetes, containers and admission controllers. Readers get concrete explanations of Kubernetes admission webhook behaviour, ordering and idempotence, plus security tips for hardening clusters.
Website: https://www.diegocomas.com/
Practical, KQL-heavy lessons on Microsoft Sentinel and Entra ID security, covering detection rule tuning, log cost reduction and exposure from anonymous sharing links. Each issue critiques a common default or assumption and shows a concrete fix.
In-depth articles on Microsoft endpoint and identity security architecture, covering Conditional Access, Windows LAPS, and Intune, with design trade-offs and documented limitations. Includes field incident write-ups that trace a real production problem to its root cause and fix.
A researcher's newsletter on cloud and identity security, covering privilege escalation paths, service-account confused deputy problems and the effect of AI on vulnerability exploitation. Readers get technical write-ups of specific cloud flaws alongside opinionated commentary on the security industry.
Short engineering field notes on cloud infrastructure and CI/CD, built around concrete failures and fixes such as skipped deploy steps, build-time blog rendering and OIDC credentials. Each issue includes code snippets and a practical check or habit readers can adopt.
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
