Posts on tools
4 posts on tools. Notes from public sources and my own test lab.
Prompt Injection Cannot Be Solved With Classical Security Models
Prompt injection is not a parsing error; it is the natural consequence of an LLM's inability to distinguish between instruction and data, and therefore a permanent patch should not be expected.
August 19, 2026·3 dk readai-securityresearchtools
Trivy: Leveraging the Swiss Army Knife of Container Security
Why looking for CVEs isn't enough. My experience with Trivy in DevSecOps pipelines and how it exposes the 'security illusion' beyond just image scanning.
August 5, 2026·3 dk readdevsecopssecuritytool-review
Vulnerabilities Behind the Surface: Navigating Container Depths with Trivy
Container security is more than just a checkbox. Explore how Trivy uncovers critical vulnerabilities in images and why static analysis is vital for DevSecOps.
July 31, 2026·3 dk readdevsecopstool-reviewtools
Trivy: Silent Sentry or CI/CD Pipeline Headache?
A deep dive into using Trivy for container and IaC security, from midnight pipeline failures to managing false positives in a DevSecOps workflow.
July 29, 2026·3 dk readdevsecopstool-reviewtools