17 articles with this tag
Your European Workloads Run on American Law. What Changes in May.
85% of European cloud runs on US infrastructure. The EU's CADA legislation drops May 27. What Staff+ engineers need to know about sovereign architectures.
We Built a Technical SEO Audit Tool. Then We Pointed It at Ourselves.
A 32-check SEO engine with Node.js and SSE, the SSRF landmines nobody warns you about, and what happened when we dogfooded our own site.
The Alignment Tax: ASI09 & ASI10 — Your Agent IS the Threat
OWASP Agentic Top 10 series finale. ASI09 (Trust Exploitation) and ASI10 (Rogue Agents) — the threats that don't need an external attacker.
The Trivy Cascade: 75 Poisoned Tags, a Blockchain Worm, 5 Days of Chaos
A complete technical dissection of the TeamPCP supply chain attack that cascaded from Trivy to Checkmarx to npm to PyPI — the largest CI/CD compromise of 2026.
NVIDIA NemoClaw: The SELinux for Agent Governance
NVIDIA NemoClaw adds kernel-level sandboxing and out-of-process policy enforcement to OpenClaw. We map its architecture against the OWASP Agentic Top 10.
When One Agent Falls, They All Fall: ASI07 & ASI08 — The Distributed Systems Nightmare That Multi-Agent Architectures Weren't Built to Survive
Amazon's Kiro deleted a production environment. 40% of multi-agent pilots fail in 6 months. ASI07 and ASI08 are distributed systems problems in AI costumes.
The Invisible Wire: 175,000 Naked AI Agents, a WireGuard Mesh, and Why Tailscale Is Becoming the Nervous System of Agentic Infrastructure
175,000 AI agents exposed with zero auth. The network layer nobody is securing — and how Tailscale's WireGuard mesh, Aperture gateway, and identity-based...
When Your Agent Becomes the Exploit: ASI05 & ASI06 — The Twin Threats That Turn AI Autonomy Against You
Deep dive into OWASP Agentic ASI05 (Code Execution) and ASI06 (Memory Poisoning). Claude Code CVEs, the Summer Yue incident, Microsoft's AI Recommendation...
The OpenClaw Meltdown: 9 CVEs, 2,200 Malicious Skills, and the Most Comprehensive Real-World Test of the OWASP Agentic Top 10
In 5 weeks, OpenClaw triggered 8 of 10 OWASP Agentic vulnerability classes. This is the forensic dissection every engineer building AI agents needs to read.
The New Security Bible: Why Every Engineer Building AI Agents Needs the OWASP Agentic Top 10
The OWASP Agentic Top 10 is the first security framework for autonomous AI agents. 10 risks, real incidents, and the attack chains that connect them.
The Chrysalis Dissection: How a State-Sponsored APT Weaponized Your Text Editor's Update Button
How APT Lotus Blossom compromised Notepad++ updates to deploy Chrysalis backdoor. DLL sideloading, API hashing, and detection rules.
Open Claw & Moltbook: The Complete Guide to the Agentic Web Revolution
A deep technical dive into Open Claw's local-first AI agents and Moltbook's AI-only social network. Installation, security analysis, and the future of...
React2Shell (CVE-2025-55182): The Critical RCE That's Turning React and Next.js Into a Hacker's Playground
React2Shell is a CVSS 10.0 pre-auth RCE in React Server Components and Next.js. Learn what it is, who's affected, and how to patch before attackers own...
The Agentic Singularity: Unrolling OpenAI’s Codex Loop and the Death of the 'Chat' Interface
The era of the chatbox is over. OpenAI's Atlas and the Codex Agent Loop introduce Recursive State Management, transforming LLMs from librarians into...
The World-Class SSH Key Generator: Theory, Practice, and Battle-Tested Workflows
A deep, practical guide to SSH key theory and real-world usage, plus a full walkthrough of the gsstk SSH Key Generator: RSA, ECDSA, Ed25519,...
The MCP Git Wake-Up Call: Why Your Agentic Workflow Is an Attack Surface
Three critical vulnerabilities in Anthropic's MCP Git server expose a new attack class: indirect prompt injection through tool servers. Technical...
MCP Security: The Uncomfortable Truth About Tool Poisoning and Prompt Injection
A debate between two authors on MCP security. Icarus argues the design is fundamentally unsafe; Hephaestus counters that risks are manageable with proper...
Receive new articles
Subscribe to receive notifications about new articles directly to your email
We won't send spam. You can unsubscribe at any time.