Patterns we see across engagements, written for the engineers who have to fix them.https://cybercraftlabs.orgenhttps://cybercraftlabs.org/blog/llm-tool-access-is-an-execution-pathhttps://cybercraftlabs.org/blog/llm-tool-access-is-an-execution-pathPrompt injection is not a content-moderation problem. The moment a model can call a function, untrusted text reaching that model is untrusted input reaching your backend — and it should be threat-modelled the same way.Sun, 20 Jul 2025 05:00:00 GMTApplication securityGaurav Raj (@thehackersbrain)https://cybercraftlabs.org/blog/broken-object-level-authorisationhttps://cybercraftlabs.org/blog/broken-object-level-authorisationBroken object-level authorisation is the finding we report most often, and it is almost never a framework failure. It is a tenancy assumption made once, early, and then trusted everywhere downstream.Fri, 18 Jul 2025 05:00:00 GMTApplication securityGaurav Raj (@thehackersbrain)https://cybercraftlabs.org/blog/severity-is-not-a-priorityhttps://cybercraftlabs.org/blog/severity-is-not-a-priorityWhy we rank findings by reachability and blast radius instead of CVSS, and how that changes the order you fix things in. A report that sorts by score tells you what is bad. It does not tell you what to do on Monday.Wed, 16 Jul 2025 05:00:00 GMTEngineering practiceGaurav Raj (@thehackersbrain)https://cybercraftlabs.org/blog/secure-by-default-architecturehttps://cybercraftlabs.org/blog/secure-by-default-architectureSecurity fails when it fights developers. The systems that stay secure are the ones where the default configuration is already the hardened one. This post looks at how we design defaults — deny-by-default networking, short-lived credentials, and guardrails that make the insecure option the harder one to reach.Fri, 11 Jul 2025 05:00:00 GMTApplication securityGaurav Raj (@thehackersbrain)https://cybercraftlabs.org/blog/zero-downtime-deploymentshttps://cybercraftlabs.org/blog/zero-downtime-deploymentsDeploying should be boring. If your team schedules releases for 2am or braces for a maintenance window, the process is broken — not the code. This post walks through the mechanics of zero-downtime deploys: health checks, connection draining, backward-compatible migrations, and the discipline that makes rollback a non-event.Tue, 08 Jul 2025 05:00:00 GMTCloud & infrastructureGaurav Raj (@thehackersbrain)https://cybercraftlabs.org/blog/secrets-management-done-righthttps://cybercraftlabs.org/blog/secrets-management-done-rightThe average codebase is one careless commit away from leaking a production key. Secrets management isn’t about a fancier vault — it’s about removing secrets from the places they don’t belong and making rotation so cheap that leaks become survivable. Here’s how we think about it.Sat, 05 Jul 2025 05:00:00 GMTApplication securityGaurav Raj (@thehackersbrain)https://cybercraftlabs.org/blog/hardening-ci-cd-pipelineshttps://cybercraftlabs.org/blog/hardening-ci-cd-pipelinesTeams spend enormous effort locking down production and then hand a build server the keys to deploy anything, anywhere, unquestioned. CI/CD pipelines run privileged, pull untrusted dependencies, and are trusted implicitly — which makes them one of the highest-value targets in the whole system. This post is about treating the pipeline like the production system it is.Wed, 02 Jul 2025 05:00:00 GMTCloud & infrastructureGaurav Raj (@thehackersbrain)