The planned feature introduces a review step before releases go live, following the Shai-Hulud attacks and a rocky migration off classic tokens that disrupted maintainer workflows.   #announcement   #supply-chain   #defend

Cyera Research Labs has discovered a "worst-case scenario" flaw in n8n. Dubbed "Ni8mare," this vulnerability (CVE-2026-21858) allows an unauthenticated remote attacker to gain full administrative control over an n8n instance.   #attack   #saas

Kubernetes 1.35 introduces beta support for CSI drivers to receive service account tokens via the "secrets" field instead of "volume_context", preventing accidental token logging.   #kubernetes   #announcement

EC2 Instance Attestation extends attestable scope from Nitro Enclaves' container environment to entire EC2 instances, enabling greater capabilities like GPU access. However, it requires proactive hardening versus Enclaves' secure-by-default design and more complex deployment through Attestable AMIs.   #aws   #explain

How DNSimple evolved from a forgotten collection of Ruby scripts to a fully automated Terraform-based system for managing hundreds of GitHub repositories.   #terraform   #iac

Vulnerable SaaS apps could enable attackers to pivot back into Microsoft 365, endangering your entire Microsoft 365 estate.   #attack   #saas   #iam   #azure

A Claude Code plugin that acts as a safety net, catching destructive git and filesystem commands before they execute.

Leash wraps AI coding agents in containers and monitors their activity. You define policies in Cedar; Leash enforces them instantly.

A Burp Suite extension for JavaScript static analysis. Extracts API endpoints, URLs, secrets, and email addresses from JavaScript files.

A collection of servers which are deliberately vulnerable to learn Pentesting MCP Servers.

A security auditor for Tailscale configurations. Scans your tailnet for misconfigurations, overly permissive access controls, and security best practice violations.

This post examines five AI system lifecycle stages where sensitive data leaks without exploitation: retrieval mixes authorization, models reconstruct redacted data, prompts merge trust zones, outputs expose internal context, and storage persists sensitive information indefinitely.