280 posts tagged with "Security"
Cybersecurity, smart contract audits, and best practices
13 Critical CVEs, One Patch: What the vm2 Sandbox-Escape Wave Says About Isolating AI Agents at the Wrong Layer
A May 2026 wave of 13 critical vm2 CVEs shows why JavaScript-level sandboxing can't contain AI-agent code — and why kernel-level isolation like gVisor and Kata Containers is the layer that actually holds.
Your Agent's Shell and Your Tenant's Container Cannot Share a Blast Radius
A concrete node-pool, network-policy, and runtime-class architecture for keeping an AI agent's shell isolated from the tenant container it's deploying and operating.
Anubis Crosses 20,000 Stars: What Self-Hosting Your Own AI-Scraper Defense Actually Costs
Anubis's proof-of-work challenge crossed 20,000 GitHub stars fighting AI scrapers — here's what it actually costs in compute versus what its JavaScript requirement costs real visitors, and whether a self-hosted PaaS should bundle it.
Cilium's eBPF Egress Gateway: The Stable Outbound IP Without the $0.135/GB NAT Tax
AWS charges $0.135/GB for a stable outbound IP through a NAT gateway. Cilium's eBPF-based Egress Gateway does the same job as a Kubernetes CRD, and on an owned Hetzner fleet it costs nothing beyond the node you already run.
Cilium Tetragon Hits Production Maturity: What Kernel-Level eBPF Enforcement Adds to a Self-Hosted PaaS's Sandbox
Tetragon 1.4 cleared the rough edges on policy authoring in February 2026. Here's what its in-kernel enforcement actually adds on top of a gVisor/Kata sandbox boundary — with a real TracingPolicy that kills an escape attempt before it lands.
Cloud Native Buildpacks Ship SBOMs by Default: What a Build-Time Bill of Materials Gets You That a Scanner Never Can
Cloud Native Buildpacks generate a CycloneDX/SPDX bill of materials as a build-time side effect, populated from dependencies the buildpack actually resolved and installed. A Dockerfile pipeline's nearest equivalent, Docker BuildKit's SBOM attestation, scans the finished image instead — and misses build-stage-only dependencies right when the EU CRA's September 2026 reporting deadline makes that gap expensive.
Dokploy's WebSocket Terminal Bug (CVE-2026-24841): One Exec Call, Root on Every Server It Manages
Inside Dokploy's CVSS 9.9 WebSocket terminal bug: the actual vulnerable code, why an argv-array fix only solves half the exploit path, and why the flaw reached every server the control plane manages over SSH, not just the local box.
Four Root Exploits in Ten Weeks: What GhostLock Says About Kernel Patching for a Self-Hosted PaaS
GhostLock lets any logged-in user become root in five seconds — and it's the fourth independently discovered kernel or hypervisor escape disclosed in ten weeks. Here's the patch-cadence argument for treating kernel CVEs as a same-day operational primitive on a self-hosted fleet.
GuardFall: Why 10 of 11 Open-Source AI Coding Agents Can't Tell What Bash Will Actually Run
Adversa AI's GuardFall research found 10 of 11 open-source AI coding agents check a shell command's raw text for danger, then hand that text to bash, which rewrites it before running. Here are the five bypass classes, per-agent results, and what it means for building agent-callable deploy tools.