Security

Showing 2 articles in Security

Security 9/27/2026 Bryant

Drowning in Alerts: The Signal-to-Noise Problem

Part 2 of a series on building an enterprise-grade Security Operations Center at home. Start from Part 0. At the end of Part 1, we had a real detection foundation: Suricata and Zeek watching a segmented network, Wazuh on the hosts, everything flowing into Elasticsearch. By every checklist, that's a...

Read article

Security 6/24/2026 Shubhra Pokhariya

Next.js 16 Server Actions Security: The Auth Check Most Developers Miss

I keep seeing it on code reviews. Proxy solid. Auth on every Server Component. Header direction correct. Then I look at the Server Actions. No auth check. Not one. The page that renders the button is protected. The action behind the button accepts whatever the caller sends -- any valid session, a...

Read article