# Security — Sylvain Kalache URL: https://www.sylvainkalache.com/topics/security My writing, talks, podcasts, and projects about Security. ## Selected work - [Nir Soudry — Head of R&D at 7AI](https://www.sylvainkalache.com/content/nir-soudry-head-of-r-d-at-7ai.md) (2026-07-15; Humans of Reliability): AI vs. AI — how autonomous attackers are scaling phishing and malware, how defenders can use agents to cut alert noise, and where accountability belongs when AI investigates and remediates incidents. - [Speed vs. Risk: Experts Weigh In on Using AI Coding Assistants](https://www.sylvainkalache.com/content/speed-vs-risk-experts-weigh-in-on-using-ai-coding-assistants.md) (2026-06-09; Dice): Engineering leaders discuss when AI coding assistants accelerate development and when they introduce security, quality, and architectural risk. - [Half of Kubernetes Clusters Are About to Lose Security Updates](https://www.sylvainkalache.com/content/half-of-kubernetes-clusters-are-about-to-lose-security-updates.md) (2026-01-29; The Landscape): A deep dive into the Kubernetes support lifecycle and what it means for the massive number of clusters running end-of-life versions. - [Kubernetes 1.34: Security, Performance, and DRA Go GA](https://www.sylvainkalache.com/content/kubernetes-1-34-security-performance-and-dra-go-ga.md) (2025-10-15; The Landscape): Release lead Vyom Yadav unpacks 58+ enhancements: DRA GA for GPU workloads, mutating admission policies, and major API server performance gains. - [AI Security Demo Night w/ Rootly AI, Okta, Panther, Tailscale & More](https://www.sylvainkalache.com/content/ai-security-demo-night-w-rootly-ai-okta-panther-tailscale-more.md) (2025-07-22; AI Security Demo Night): Live demos at Okta HQ in San Francisco — presenting Rootly AI alongside cybersecurity startups tackling identity, endpoint security, and threat response. - [Brian Shaw — SVP of Infrastructure and Core Banking](https://www.sylvainkalache.com/content/brian-shaw-svp-of-infrastructure-and-core-banking.md) (2025-07-03; Humans of Reliability): Building and operating core banking infrastructure with a focus on uptime and regulatory compliance. - [Ryan Lockard — VP of Platform Engineering at CVS Health](https://www.sylvainkalache.com/content/ryan-lockard-vp-of-platform-engineering-at-cvs-health.md) (2025-05-30; Humans of Reliability): Platform engineering at healthcare scale — compliance, reliability, and developer experience. - [Navigating DORA: A Guide to the EU's Digital Operational Resilience Act](https://www.sylvainkalache.com/content/navigating-dora-a-guide-to-the-eu-s-digital-operational-resilience-act.md) (2025-04-08; Data Defenders Forum): Breaking down the EU's Digital Operational Resilience Act — what it means for financial services and tech companies operating in Europe. - [Uplevelling Your Container Lifecycle Management](https://www.sylvainkalache.com/content/uplevelling-your-container-lifecycle-management.md) (2025-03-19; CloudNativeNow): Best practices for managing the full container lifecycle — from build to runtime to decommission. - [Dependency and Runtime Management](https://www.sylvainkalache.com/content/dependency-and-runtime-management.md) (2025-03-19; CloudNativeNow): Strategies for managing dependencies and runtimes in containerized environments — keeping images secure and up to date. - [The Changing Face of Election Security](https://www.sylvainkalache.com/content/the-changing-face-of-election-security.md) (2024-11-03; Data Defenders Forum): How election infrastructure security is evolving — from paper ballots to digital voting systems and the role of data compliance. - [APRA (American Privacy Rights Act) Explained](https://www.sylvainkalache.com/content/apra-american-privacy-rights-act-explained.md) (2024-05-29; Data Defenders Forum): A walkthrough of the American Privacy Rights Act — its scope, requirements, and implications for tech companies handling user data. - [EU AI Act Secrets Revealed](https://www.sylvainkalache.com/content/eu-ai-act-secrets-revealed.md) (2024-05-15; Data Defenders Forum): What the EU AI Act actually requires — risk classifications, compliance timelines, and what it means for AI-driven products. - [Intelligent Document Processing Compliance, from Stone Tablets to Digital Docs](https://www.sylvainkalache.com/content/intelligent-document-processing-compliance-from-stone-tablets-to-digital-docs.md) (2024-05-08; Data Defenders Forum): The evolution of document processing compliance — from physical records to AI-powered intelligent document processing systems. - [Getting started with Platform Engineering security and compliance](https://www.sylvainkalache.com/content/getting-started-with-platform-engineering-security-and-compliance.md) (2024-03-18; Data Defenders Forum): How platform engineering teams can embed security and compliance into their internal developer platforms from day one. - [Turn data security & compliance into a business advantage](https://www.sylvainkalache.com/content/turn-data-security-compliance-into-a-business-advantage.md) (2023-12-13; Data Defenders Forum): How forward-thinking companies are turning data security and compliance requirements into competitive advantages. - [Navigating LLMs challenges in data security & compliance](https://www.sylvainkalache.com/content/navigating-llms-challenges-in-data-security-compliance.md) (2023-10-03; Data Defenders Forum): The unique data security and compliance challenges that large language models introduce — from training data to inference outputs. - [No US SaaS for European businesses?](https://www.sylvainkalache.com/content/no-us-saas-for-european-businesses.md) (2023-07-20; Data Defenders Forum): The growing tension between US SaaS providers and European data sovereignty requirements — what it means for cross-Atlantic business. - [Private SaaS: a new gold standard?](https://www.sylvainkalache.com/content/private-saas-a-new-gold-standard.md) (2023-05-24; Data Defenders Forum): Exploring the rise of private SaaS deployments as a response to data sovereignty concerns and enterprise security requirements. - [4 Ways to Enhance Your Dockerfiles](https://www.sylvainkalache.com/content/4-ways-to-enhance-your-dockerfiles.md) (2023-05-04; The New Stack): Practical tips for writing better Dockerfiles — multi-stage builds, layer caching, security scanning, and image optimization. - [How does data security impact open-source projects?](https://www.sylvainkalache.com/content/how-does-data-security-impact-open-source-projects.md) (2023-03-15; Data Defenders Forum): The intersection of data security practices and open-source development — challenges, best practices, and community governance. - [The Future of Code Quality, Security, and Agility Lies in Machine Learning](https://www.sylvainkalache.com/content/the-future-of-code-quality-security-and-agility-lies-in-machine-learning.md) (2019-02-01; CIO): How machine learning is transforming code quality assurance, security scanning, and agile development workflows. [All work](https://www.sylvainkalache.com/index.md)