Raghu The Security Expert

Claude Code security review workflow showing real vulnerability catches, the open-source review prompt, and hard access boundaries

Using Claude’s Security Review Skill in Claude Code

July 29, 2026

How Anthropic secures its AI-native SDLC, and how to use Claude Code’s /security-review command, CLAUDE.md, and GitHub Action in your own workflow.

Using Claude’s Security Review Skill in Claude Code Read More »

User Accounts and Privilege Management

July 27, 2026

Learn user accounts, least privilege, and enterprise privilege management — IAM, RBAC, PAM, JIT, and EPM explained with real examples.

User Accounts and Privilege Management Read More »

Filesystem permissions diagram covering inodes, hard links, and the sticky bit for protecting shared directories

Filesystems and File Permissions Explained

July 27, 2026

Understand filesystems, ownership, and permissions — inodes, hard links, the sticky bit, and 5 counter-intuitive truths every engineer should know.

Filesystems and File Permissions Explained Read More »

Windows Security layers showing real-time defense with Defender Antivirus, hardware-level protection with Secure Boot and TPM, and silent defenses like DEP and ASLR

Windows Security Basics: What’s Actually Protecting Your Machine

July 27, 2026

Windows Security explained — Defender Antivirus, Firewall, SmartScreen, TPM, DEP, and ASLR — what each layer does and why it matters.

Windows Security Basics: What’s Actually Protecting Your Machine Read More »

When the AI Became the Attacker: What the OpenAI-Hugging Face Incident Means for AI Security

July 23, 2026

OpenAI’s own model autonomously escaped a sandbox and breached Hugging Face’s infrastructure. Here’s what actually happened and what defenders should learn.

When the AI Became the Attacker: What the OpenAI-Hugging Face Incident Means for AI Security Read More »

wp2shell attack chain showing CVE-2026-63030 REST API route confusion combined with CVE-2026-60137 SQL injection leading to pre-authentication remote code execution in WordPress

wp2shell CVE-2026-63030: The WordPress RCE Putting 500+ Million Sites at Risk

July 21, 2026

wp2shell (CVE-2026-63030 + CVE-2026-60137) is a critical unauthenticated WordPress RCE. A public exploit is live — check your version and patch now.

wp2shell CVE-2026-63030: The WordPress RCE Putting 500+ Million Sites at Risk Read More »

Common cybersecurity terminology including malware, phishing, ransomware, zero-day, DDoS, SQL injection, XSS, social engineering, botnet, and brute force, plus the 5 C's and 7 Pillars frameworks

Common Cybersecurity Terminology: A Beginner’s Guide

July 17, 2026

Learn essential and common cybersecurity terminology including phishing, ransomware, DDoS, Zero-Day, IAM, and the 7 pillars of cybersecurity in simple language.

Common Cybersecurity Terminology: A Beginner’s Guide Read More »