security 39
- workflow execution policy is a fintech control
- A vulnerability report is not a bug ticket
- the revolut breach is an automation boundary problem
- post-quantum TLS is a platform migration, not a crypto project
- hybrid ai is becoming a platform contract
- kubernetes ca rotation is the boring outage teams forgot to rehearse
- ai traffic needs an edge admission policy
- Agent Skill Registries Need Dependency Governance
- shadow ai is now part of the ci/cd threat model
- agent evals are production security systems now
- generated apps need patch ownership, not platform vibes
- agent trust is a runtime problem
- hardened images are becoming the default base layer
- agentic autofix needs evidence, not applause
- the kubernetes api server is part of your network policy now
- ai bills of materials are cluster inventory now
- local AI runtimes are part of your attack surface now
- plugin marketplaces are the new endpoint policy for coding agents
- VEX turns container scanning into queue discipline
- agent sandboxes are the new enterprise desktop
- container escape is becoming an agent workload
- your CI agent is reading more than your prompt
- coding agents made repositories the security boundary
- permission prompts are not an agent security strategy
- the developer laptop is the first production environment for agents
- some Kubernetes vulnerabilities do not have patches
- github's agent audit api is the boring feature that matters
- Watch out - that recruiter profile might be a scam. Check here first.
- How to safely inspect a repository before running anything on your machine
- Watch out, your recruiter might be a scam
- containers are becoming policy wrappers for ai agents
- From capital one to unreviewed AI code the same ssrf, different decade
- github failed at the only thing they should do: git
- nodes/proxy Was Never a Monitoring Permission
- User Namespaces Are a Bigger Container Milestone Than Most Docker Headlines
- MCP Adoption Is Accelerating Faster Than Agent Governance
- AI Agent Governance Is Becoming the Real Internal Platform
- MicroVMs Are Becoming the New Container Boundary for AI Work
- The LiteLLM Supply Chain Attack — What AI-Dependent Codebases Should Audit