Clear Path Security
SOC analyst career guide: skills, certifications and a 12-month learning plan
If you are aiming for a Security Operations Centre, or SOC, role, the good news is that[…]
Privilege escalation detection on Windows: techniques and telemetry
Privilege escalation on Windows is one of those problems that is easy to underestimate until it appears[…]
MITRE ATT&CK Navigator: building a coverage heatmap step by step
MITRE ATT&CK Navigator is useful when you need to turn a long list of detections, controls, and[…]
DNP3 protocol security for utilities: secure authentication and monitoring
DNP3 remains a common protocol in utility environments because it is efficient, widely supported, and well suited[…]
Prompt injection attacks explained with real examples and defences
Prompt injection is one of the most important security issues to understand when you are deploying large[…]
AI red teaming methodology for customer-facing chatbots
Customer-facing chatbots are now doing more than answering simple questions. In many organisations they sit in front[…]
Integrating Trivy vulnerability and misconfiguration scanning into GitHub Actions
For UK SMEs building software, the question is rarely whether to add security scanning to CI. It[…]
Designing log pipelines for detection engineering
Detection engineering only works when the underlying log pipeline is designed to support it. If telemetry arrives[…]
Preventing secret leakage in CI/CD environments
Secrets leakage in CI/CD environments is rarely caused by one dramatic failure. More often, it is the[…]
Creating incident response playbooks and runbooks
Incident response works best when the team is not trying to invent the process during a live[…]