Security leadership grounded in engineering.https://securityatdepth.com/https://securityatdepth.com/job-post-prompt-injection/https://securityatdepth.com/job-post-prompt-injection/A hidden instruction in a job posting tries to stop automated applications. Its targeting and false-confirmation request show why even a creative defense needs validation.Fri, 11 Sep 2026 00:00:00 GMTOffense as Defense: Why a Clever AI Prompt-Injection Control Still Needs ValidationGovern & InvestPerspectiveGovernance & AccountabilityControl EffectivenessModel & Decision-System RiskAIAutomationSecurity Architecturehttps://securityatdepth.com/nvd-harvester/https://securityatdepth.com/nvd-harvester/Deeper vulnerability analysis needs a dataset you can inspect and trust. Building NVD Harvester exposed the challenges of keeping it complete, current, and reliable—and the limits of NVD alone.Thu, 10 Sep 2026 00:00:00 GMTNVD Harvester: A Foundation for Vulnerability AnalysisArchitect & BuildPerspectiveControl EffectivenessContinuous Monitoring & ImprovementVulnerability ManagementAutomationReliabilityCVSShttps://securityatdepth.com/epss-v5-transition/https://securityatdepth.com/epss-v5-transition/EPSS v5 arrived through the same interface, but its new score distribution could materially alter vulnerability queues, thresholds, capacity assumptions, and executive reporting.Mon, 15 Jun 2026 00:00:00 GMTEPSS v5 Changed the Queue Without Changing the IntegrationGovern & InvestPerspectiveModel & Decision-System RiskGovernance & AccountabilityContinuous Monitoring & ImprovementVulnerability ManagementEPSShttps://securityatdepth.com/n8n-backup-with-ansible/https://securityatdepth.com/n8n-backup-with-ansible/After an update damaged both automation workflows and their internal backup path, I moved exports outside n8n. The failure exposed gaps in separation, secret handling, and restore testing.Mon, 28 Jul 2025 00:00:00 GMTA Backup That Depends on n8n Is Not an Independent ControlResilience & RecoveryOperating RetrospectiveResilience & RecoveryControl EffectivenessSystem Lifecycle & ChangeAutomationn8nAnsibleBackuphttps://securityatdepth.com/what-executives-should-demand-from-vulnerability-prioritization/https://securityatdepth.com/what-executives-should-demand-from-vulnerability-prioritization/A credible program must explain why an exposure matters, who owns the response, what uncertainty remains, and whether the decision reduced material risk.Wed, 02 Apr 2025 00:00:00 GMTWhat Executives Should Demand from Vulnerability PrioritizationGovern & InvestExecutive BriefRisk PrioritizationGovernance & AccountabilityControl EffectivenessVulnerability Managementhttps://securityatdepth.com/leveraging-epss-in-practice/https://securityatdepth.com/leveraging-epss-in-practice/EPSS becomes useful when thresholds reflect risk appetite, remediation capacity, and business context—and when the program measures what those thresholds actually capture.Thu, 20 Mar 2025 00:00:00 GMTOperationalizing EPSS Without Turning Probability into Policy by AccidentDefend & DetectPerspectiveRisk PrioritizationControl EffectivenessInvestment & CapacityVulnerability ManagementEPSSCVSSKEVhttps://securityatdepth.com/diving-deep-into-epssv4-whats-new-and-why-it-matters-for-your-vulnerability-management/https://securityatdepth.com/diving-deep-into-epssv4-whats-new-and-why-it-matters-for-your-vulnerability-management/When a risk model changes, the operational question is not whether the new numbers look better. It is whether your thresholds, workflows, and executive reporting still mean what you think they mean.Wed, 19 Mar 2025 00:00:00 GMTEPSS v4 Changed the Scores. The Leadership Lesson Was Model GovernanceGovern & InvestPerspectiveModel & Decision-System RiskGovernance & AccountabilityContinuous Monitoring & ImprovementVulnerability ManagementEPSShttps://securityatdepth.com/stop-playing-whack-a-mole-with-vulnerabilities/https://securityatdepth.com/stop-playing-whack-a-mole-with-vulnerabilities/CVSS can describe severity, EPSS can estimate exploitation likelihood, and SSVC can structure response. Leadership still has to connect those signals to business exposure and accountable action.Sat, 15 Feb 2025 00:00:00 GMTVulnerability Management Is a Decision System, Not a Patch QueueGovern & InvestPerspectiveRisk PrioritizationGovernance & AccountabilityInvestment & CapacityVulnerability ManagementEPSSSSVChttps://securityatdepth.com/proxmox-lxc-ai/https://securityatdepth.com/proxmox-lxc-ai/Shared GPU capacity can make local AI available without dedicating an expensive accelerator to one workload. The design question is how to balance efficiency, isolation, and operational risk.Mon, 03 Feb 2025 00:00:00 GMTLocal AI on Proxmox: The Security Tradeoffs Behind GPU-Enabled LXCArchitect & BuildImplementation GuideSecure ArchitectureData Protection & PrivacyAIProxmoxContainersNVIDIASecurity Architecturehttps://securityatdepth.com/upgrade-awx-microk8s-ubuntu/https://securityatdepth.com/upgrade-awx-microk8s-ubuntu/When AWX orchestrates enterprise patching and security work, the automation platform itself needs a controlled, recoverable upgrade path.Sat, 08 Apr 2023 00:00:00 GMTAWX Upgrades: Patching the System That Runs Your PatchesResilience & RecoveryImplementation GuideSystem Lifecycle & ChangeResilience & RecoveryGovernance & AccountabilityAWXKubernetesAutomationReliabilityBackuphttps://securityatdepth.com/linux-awx-microk8s-ubuntu/https://securityatdepth.com/linux-awx-microk8s-ubuntu/AWX centralizes privileged automation, from vulnerability remediation to configuration checks. Its value depends on accountable identity, state, upgrades, and recovery.Fri, 07 Apr 2023 00:00:00 GMTRunning AWX on MicroK8s: Controls for an Automation PlatformArchitect & BuildField NoteSecure ArchitectureIdentity & AccessAWXAnsibleKubernetesAutomationSecurity Architecturehttps://securityatdepth.com/how-to-esxi-update/https://securityatdepth.com/how-to-esxi-update/The ESXi command is the smallest part of a safe update. Maintenance mode, rollback planning, compatibility review, and post-change evidence are the real controls.Mon, 27 Sep 2021 00:00:00 GMTPatching Standalone ESXi: A Recovery-First RunbookResilience & RecoveryImplementation GuideSystem Lifecycle & ChangeResilience & RecoveryControl EffectivenessVMwareESXiPatchingInfrastructure