532 posts tagged with "Security"
Cybersecurity, smart contract audits, and best practices
Your Monitoring Stack Was a Root Shell: What Kubernetes v1.36's Kubelet Authorization GA Actually Fixes
Kubernetes v1.36 closes a real RCE hiding in nodes/proxy, but its GA authorization split is scoped by operation type, not by tenant — here's what it actually fixes and where pod-level break-glass access still has to live.
A 'Medium' CVE Popped a Full Reverse Shell: What ms-agent's Six-Layer Regex Bypass Teaches About Agent Sandboxing
CVE-2026-2256 scored a 'Medium' 6.5 on CVSS, but its proof-of-concept is a full reverse shell through an AI agent's own shell tool. Here's exactly how a six-layer regex denylist got bypassed, and why only a real sandbox boundary — not command validation — closes the gap.
Your Namespace-Scoped Sealed Secret Wasn't: What CVE-2026-22728's Rotation Bug Actually Broke
A rotation-endpoint bug in Bitnami's Sealed Secrets let attacker-controlled annotations turn a namespace-scoped secret cluster-wide — without touching Kubernetes RBAC at all. Here's the attack, and the NetworkPolicy audit every shared cluster needs to run.
Your Deploy Agent's MCP Server Is a Trust Boundary — Here's the Threat Model
A malicious MCP server already backdoored a mail pipeline in the wild. Here's the threat model for what happens when the same protocol holds your deploy and rollback credentials — and the scoping, gating, and logging practices that actually bound the damage.
Incus as a Cluster API Node Substrate: A Real Provider, a Narrow Case, and a Default You Should Flip
cluster-api-provider-incus already exists and already works — but it defaults to privileged containers, ships pre-1.0, and doesn't beat gVisor/Kata on the isolation question that matters most. Here's the concrete case for and against exposing it.
GhostApproval: The AI Coding Agent Flaw That Turned 'Approve This Edit?' Into a Rubber Stamp
Wiz's GhostApproval disclosure shows six AI coding assistants following symlinks out of their sandboxes while their approval dialogs described a different file than the one being written. Three vendors patched it; two said a patch isn't possible.
Daytona's $24M Compliance Bet: What a HIPAA/SOC 2 AI Sandbox Really Costs to Build Yourself
Daytona's $24M Series A prices out HIPAA/SOC 2 compliance for AI sandboxes — the real dollar-and-timeline cost of building that compliance yourself, and why a self-hosted platform already owns the harder half of the pitch for free.
Your Deploy Agent's MCP Server Just Became Infrastructure: What Changes When It Leaves Your Laptop
A concrete walkthrough of what an infrastructure-control MCP server owes you once it moves from a local stdio process to a remote service teammates, CI, and other agents can call: mandatory auth, per-action write scopes, stateless-scaling idempotency, and a tested rollback plan.
CVE-2026-25518: The cert-manager Bug That Lets a Poisoned DNS Reply Crash Your Whole TLS Pipeline
A crafted DNS response can crash the cert-manager controller mid-renewal. Here's exactly what CVE-2026-25518 breaks, why the fix isn't just an upgrade, and the two config changes a self-hosted PaaS's TLS automation needs today.