» Tag
security
31 postsGo 16 Yaşında: Concurrency Testleri, Güvenlik ve GC İyileştirmeleri
Go'nun 16. yılında testing/synctest, container-aware scheduling, Green Tea GC ve FIPS 140-3 sürecine dair teknik özet ve mühendisler için önemi.
gogolangconcurrencygarbage-collectionZero-Trust Workload Identity in Kubernetes: SPIFFE, SPIRE, Cilium
Why IP-based network policies fail in Kubernetes, and how SPIFFE, SPIRE, and Cilium enable cryptographic workload identity and enforced mutual TLS.
kubernetesspiffespireciliumBad Epoll Flaw Grants Root Access on Linux and Android
CVE-2026-46242, dubbed Bad Epoll, lets unprivileged local users gain root via a race-condition bug in the Linux kernel's epoll subsystem; a patch is already out.
linuxsecuritykernelcveMetis: Arm's Open-Source Agentic Security Review Tool
Metis, built by Arm's Product Security Team, is an open-source framework that uses LLM reasoning to find security vulnerabilities across large codebases.
securityaillmstatic-analysisAI Code Audit: 15 Security Flaws Claude Found in Production
An LLM-based security audit uncovered 15 OWASP-classified flaws-SQL/NoSQL injection, IDOR, path traversal-each shown with vulnerable and fixed code.
securityowaspllmcode-reviewResearchers Uncover Git Hash Chain Malleability in Signed Commits
New research shows signed Git commit hashes can be altered while keeping a valid signature and GitHub's Verified badge, undermining commit integrity assumptions.
gitcryptographysupply-chain-securityecdsaKars: A Kubernetes-Native Zero-Trust Runtime for AI Agents
Kars runs each AI agent in an isolated Kubernetes sandbox, routing every external call through a Rust-based zero-trust broker with no agent-held credentials.
kubernetesai-agentssecurityrustHow context is managed in long-running agentic systems
A look at how Director's Journal, Critic's Review and Timeline mechanisms keep multi-agent security investigation systems coherent over long-running sessions.
aiagentic-aillmmulti-agent-systemsPi Agent Rust: A High-Performance AI Coding Agent CLI in Rust
pi_agent_rust is a Rust rewrite of Mario Zechner's Pi Agent, offering a single binary, instant startup, and hardened extension security for terminal AI coding.
rustai-agentscli-toolsdeveloper-toolsBuilding Secure AI Sandboxes on Kubernetes
Comparing gVisor, Kata, and Firecracker for running untrusted AI agent code safely on Kubernetes, and why pods alone aren't a security boundary.
kubernetesai-agentssecuritysandboxing