Subscribe to Nine Lives, Zero Trust, and get security insights delivered to your inbox.
Here's what you'll get:
Zero Trust insights you can actually use
DevSecOps practices for building security into your pipeline
Threat intel worth knowing
Cloud security tips from the trenches
Secure coding and shift-left strategies
The occasional cat pun (we're paranoid about spam, not fun)
Whether you're building secure infrastructure, automating compliance, or navigating the multi-cloud maze, this newsletter has you covered.
Filter by topic to get precisely what you need. Unsubscribe anytime.
Stay curious. Stay secure. Land on your feet.
Last January, I published a post on building an LLM Firewall with AWS Lambda — an app-level proxy that inspects prompts between a user and the model. It worked, but it required custom code, per-app deployment, and had no visibility into AI traffic you didn’t control.
The fund...
New in 2026: Microsoft shipped two major AI security capabilities in early 2026: Defender for AI for real-time threat protection and the Security Dashboard for AI for unified risk visibility. This post walks through both with real screenshots and KQL detections you can use today.
AI workloads are the new attack surface. Azure OpenAI endpoints are int...
In December, I published a post on securing the container supply chain — SBOM generation, image signing, and build provenance with GitHub Actions. That covered build-time security: making sure the image you ship is the image you built.
But what happens a...
On March 2, 2026, Microsoft published an advisory on OAuth redirection abuse enabling phishing and malware delivery. Attackers register OAuth apps with malicious redirect URIs, then trick users into authe...
If you manage Azure infrastructure through CLI, PowerShell, Terraform, or any tool that hits the ARM control plane, MFA enforcement is coming for every write operation your user accounts make.
Starting October 1, 2025, Microsoft began gradually rolling out Phase 2 of mandatory MFA enforcement. Phase 1 (October 2024) locked down the portal. Phase 2 extends that to Azure...