» Tag
security
441 postsHow DORA Metrics Measure Security Posture Health
Discover how DORA metrics can be adapted to measure security posture health and enhance team performance.
Is Nix a Safer Alternative to Arch Linux AUR?
Explore whether Nix is a safer alternative to AUR. Comparisons on security, review processes, and reproducibility.
SSH Security: Changing Port 22 and Port Forwarding
Enhancing SSH security involves changing port 22 and managing port forwarding. Find out more here.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comHow to Make an AI Agent's History Truly Unforgeable
An AI agent's unforgeable-history claim failed audit: dual writers, race conditions, corrupted records. Fix: single writer, signed anchor, fail-closed design.
Triage Is the Product: AI Agents Audit Ethereum's Protocol Code
Ethereum Foundation's security team runs parallel AI agents against protocol code, surfacing a real CVE—yet the hard part is filtering out false positives.
Control Before, Prove After: An Accountability Model for AI Agents
A new accountability primitive restricts AI agents before acting and cryptographically proves actions after, closing gaps left by policy engines and logs.
Hardening Kubernetes: Closing the kubectl debug node Loophole
kubectl debug node can bypass pod security restrictions, granting root access to a node. Learn how PSA, RBAC, and break-glass namespaces close this gap.
Google Pays $250K for 16-Year-Old Linux KVM Escape Flaw
Dubbed Januscape, a Linux KVM flaw lets guest VMs break out and hijack the host. Google awarded the discovering researcher a $250,000 bug bounty.
Oracle Patching Demystified: CPU, RU, RUR and 2026's New CSPU
Oracle's patching vocabulary shifted from CPU/PSU to RU/RUR/MRP, and in 2026 added monthly CSPUs. A clear guide to what to apply, what's deprecated, and how version numbers encode patch levels.
How Much Isolation Do AI Agents Actually Need?
After Asana's MCP data leak, Sedai engineers debate how much session isolation AI agents truly need, weighing security against cost and speed.