Security leadership grounded in engineering.https://securityatdepth.com/https://securityatdepth.com/epss-v5-transition/https://securityatdepth.com/epss-v5-transition/EPSS v5 arrived through the same interface, but its new score distribution could materially alter vulnerability queues, thresholds, capacity assumptions, and executive reporting.Mon, 15 Jun 2026 00:00:00 GMTEPSS v5 Changed the Queue Without Changing the IntegrationGovern & InvestPerspectiveVulnerability ManagementEPSSModel RiskGovernanceLeadershiphttps://securityatdepth.com/n8n-backup-with-ansible/https://securityatdepth.com/n8n-backup-with-ansible/After an update damaged both automation workflows and their internal backup path, I moved exports outside n8n. The failure exposed gaps in separation, secret handling, and restore testing.Mon, 28 Jul 2025 00:00:00 GMTA Backup That Depends on n8n Is Not an Independent ControlResilience & RecoveryOperating RetrospectiveAutomationn8nAnsibleBackupRecoveryhttps://securityatdepth.com/what-executives-should-demand-from-vulnerability-prioritization/https://securityatdepth.com/what-executives-should-demand-from-vulnerability-prioritization/A credible program must explain why an exposure matters, who owns the response, what uncertainty remains, and whether the decision reduced material risk.Wed, 02 Apr 2025 00:00:00 GMTWhat Executives Should Demand from Vulnerability PrioritizationGovern & InvestExecutive BriefVulnerability ManagementRiskLeadershipControl EffectivenessGovernancehttps://securityatdepth.com/leveraging-epss-in-practice/https://securityatdepth.com/leveraging-epss-in-practice/EPSS becomes useful when thresholds reflect risk appetite, remediation capacity, and business context—and when the program measures what those thresholds actually capture.Thu, 20 Mar 2025 00:00:00 GMTOperationalizing EPSS Without Turning Probability into Policy by AccidentDefend & DetectPerspectiveVulnerability ManagementEPSSCVSSKEVRiskhttps://securityatdepth.com/diving-deep-into-epssv4-whats-new-and-why-it-matters-for-your-vulnerability-management/https://securityatdepth.com/diving-deep-into-epssv4-whats-new-and-why-it-matters-for-your-vulnerability-management/When a risk model changes, the operational question is not whether the new numbers look better. It is whether your thresholds, workflows, and executive reporting still mean what you think they mean.Wed, 19 Mar 2025 00:00:00 GMTEPSS v4 Changed the Scores. The Leadership Lesson Was Model GovernanceGovern & InvestPerspectiveVulnerability ManagementEPSSModel RiskGovernanceLeadershiphttps://securityatdepth.com/stop-playing-whack-a-mole-with-vulnerabilities/https://securityatdepth.com/stop-playing-whack-a-mole-with-vulnerabilities/CVSS can describe severity, EPSS can estimate exploitation likelihood, and SSVC can structure response. Leadership still has to connect those signals to business exposure and accountable action.Sat, 15 Feb 2025 00:00:00 GMTVulnerability Management Is a Decision System, Not a Patch QueueGovern & InvestPerspectiveVulnerability ManagementEPSSSSVCRiskLeadershiphttps://securityatdepth.com/proxmox-lxc-ai/https://securityatdepth.com/proxmox-lxc-ai/GPU passthrough can turn older hardware into a capable local-AI environment. The useful design question is what efficiency, isolation, and operational risk you are willing to trade.Mon, 03 Feb 2025 00:00:00 GMTLocal AI on Proxmox: The Security Tradeoffs Behind GPU-Enabled LXCArchitect & BuildImplementation GuideAIProxmoxContainersNVIDIASecurity Architecturehttps://securityatdepth.com/upgrade-awx-microk8s-ubuntu/https://securityatdepth.com/upgrade-awx-microk8s-ubuntu/An operator can automate an AWX upgrade, but it cannot decide whether your backups, capacity, compatibility, and recovery path are good enough.Sat, 08 Apr 2023 00:00:00 GMTUpgrading AWX on MicroK8s Without Treating the Operator as a Rollback PlanResilience & RecoveryImplementation GuideAWXKubernetesAutomationReliabilityRecoveryhttps://securityatdepth.com/linux-awx-microk8s-ubuntu/https://securityatdepth.com/linux-awx-microk8s-ubuntu/A lab-sized AWX deployment is easy to start and surprisingly instructive to operate. The important work begins with state, access, upgrades, and recovery.Fri, 07 Apr 2023 00:00:00 GMTRunning AWX on MicroK8s: What a Small Automation Platform Still RequiresArchitect & BuildImplementation GuideAWXAnsibleKubernetesAutomationSecurity Architecturehttps://securityatdepth.com/how-to-esxi-update/https://securityatdepth.com/how-to-esxi-update/The ESXi command is the smallest part of a safe update. Maintenance mode, rollback planning, compatibility review, and post-change evidence are the real controls.Mon, 27 Sep 2021 00:00:00 GMTPatching Standalone ESXi: A Lab Runbook Built Around RecoveryResilience & RecoveryImplementation GuideVMwareESXiPatchingRecoveryInfrastructurehttps://securityatdepth.com/linux-uninstall-kernel/https://securityatdepth.com/linux-uninstall-kernel/Old kernels can fill a small boot volume, but cleanup should preserve a known-good fallback and use the package manager’s own dependency decisions.Mon, 27 Sep 2021 00:00:00 GMTRecovering Ubuntu Boot Space Without Removing Your Recovery PathResilience & RecoveryImplementation GuideLinuxUbuntuOperationsReliabilityRecoveryhttps://securityatdepth.com/bash-randompass/https://securityatdepth.com/bash-randompass/A secure random string is useful in a lab, but generation is only one part of credential security. Here is a practical shell pattern and the limits that matter.Mon, 22 Apr 2019 00:00:00 GMTRandom Passwords from the Shell: A Small Tool with Security BoundariesArchitect & BuildField NoteLinuxBashShellPassword Securityhttps://securityatdepth.com/how-to-bash-history/https://securityatdepth.com/how-to-bash-history/A cleaner shell history improves retrieval, but the more important design question is what should be retained, synchronized, or removed in the first place.Mon, 22 Apr 2019 00:00:00 GMTBash History Is Operational Memory—and Sometimes Sensitive DataDefend & DetectField NoteLinuxBashShellOperations