280 posts tagged with "Security"
Cybersecurity, smart contract audits, and best practices
Kubernetes 1.36 Just Removed gitRepo Volumes and IPVS kube-proxy — Here's the Audit Your Cluster API Fleet Needs Before You Upgrade
Kubernetes 1.36 permanently kills gitRepo volumes (closing a CVE-2024-10220-class RCE) and removes IPVS kube-proxy mode as hard failures, not warnings. Here are the exact audit commands a Cluster API fleet needs before upgrading, including the CAPI config gap that hides IPVS on Hetzner clusters.
Your Monitoring Stack Was a Root Shell: What Kubernetes v1.36's Kubelet Authorization GA Actually Fixes
Kubernetes v1.36 closes a real RCE hiding in nodes/proxy, but its GA authorization split is scoped by operation type, not by tenant — here's what it actually fixes and where pod-level break-glass access still has to live.
A 'Medium' CVE Popped a Full Reverse Shell: What ms-agent's Six-Layer Regex Bypass Teaches About Agent Sandboxing
CVE-2026-2256 scored a 'Medium' 6.5 on CVSS, but its proof-of-concept is a full reverse shell through an AI agent's own shell tool. Here's exactly how a six-layer regex denylist got bypassed, and why only a real sandbox boundary — not command validation — closes the gap.
Your Namespace-Scoped Sealed Secret Wasn't: What CVE-2026-22728's Rotation Bug Actually Broke
A rotation-endpoint bug in Bitnami's Sealed Secrets let attacker-controlled annotations turn a namespace-scoped secret cluster-wide — without touching Kubernetes RBAC at all. Here's the attack, and the NetworkPolicy audit every shared cluster needs to run.
Your Deploy Agent's MCP Server Is a Trust Boundary — Here's the Threat Model
A malicious MCP server already backdoored a mail pipeline in the wild. Here's the threat model for what happens when the same protocol holds your deploy and rollback credentials — and the scoping, gating, and logging practices that actually bound the damage.
Incus as a Cluster API Node Substrate: A Real Provider, a Narrow Case, and a Default You Should Flip
cluster-api-provider-incus already exists and already works — but it defaults to privileged containers, ships pre-1.0, and doesn't beat gVisor/Kata on the isolation question that matters most. Here's the concrete case for and against exposing it.
GhostApproval: The AI Coding Agent Flaw That Turned 'Approve This Edit?' Into a Rubber Stamp
Wiz's GhostApproval disclosure shows six AI coding assistants following symlinks out of their sandboxes while their approval dialogs described a different file than the one being written. Three vendors patched it; two said a patch isn't possible.
Daytona's $24M Compliance Bet: What a HIPAA/SOC 2 AI Sandbox Really Costs to Build Yourself
Daytona's $24M Series A prices out HIPAA/SOC 2 compliance for AI sandboxes — the real dollar-and-timeline cost of building that compliance yourself, and why a self-hosted platform already owns the harder half of the pitch for free.
Your Deploy Agent's MCP Server Just Became Infrastructure: What Changes When It Leaves Your Laptop
A concrete walkthrough of what an infrastructure-control MCP server owes you once it moves from a local stdio process to a remote service teammates, CI, and other agents can call: mandatory auth, per-action write scopes, stateless-scaling idempotency, and a tested rollback plan.