How to design a state of the art security logging platform for Kubernetes clusters, managed (EKS, GKE) or self-managed.

AI is scaling discovery. The "human glue" and tribal knowledge behind response & remediation can't keep up. We need better foundational tools here.

OpenAI's post which describes how they secure the environments used to train and evaluate frontier models.

Tailscale SSH vulnerabilities (the "Tailworm" report) stemmed from post-authorization permission enforcement, including SSH forwarding, and require an existing authorized tailnet foothold. Fixed in v1.104.4, with four security bulletins. Users should update, review SSH policies, and consider check mode.

A "Security Constitution" (12 principles, 11 lessons, 13 trust anchors) guides an LLM harness to find insecure-by-design cloud flaws, meaning missing controls. It produced 109 filings across three clouds, and the article walks through five GCP and Azure cases.

Detect and mitigate CVE-2026-111497, a critical Brotli decoder vulnerability enables remote code execution.

A configuration mismatch in GLM 5.3 on Workers AI triggered an SGLang bug that exposed KV cache pages across requests. Here is how Cloudflare addressed the issue.

An automated campaign is planting secret-dumping workflows in every repository that stolen GitHub tokens can reach. It uses no C2 server, is actively evolving, and has been significantly disrupted by recent GitHub security improvements.

Jon Oberheide automated YubiKey touches for agentic logins, replacing flaky phone-call 2FA on one portal. A headless browser relays FIDO challenges to a host, where a Raspberry Pi Pico drives a reed relay grounding the key's touch sensor.

Reverse engineer anything with agents, from app behavior down to native binaries.

A sandboxed Claude Code dev container for the Zed editor. You can also check out the companion blog post.

Git signing and SSH for agents, with expressive policies and keys that never leave Turnkey.

A vendor-neutral collection of Sigma, YARA, and Suricata rules for detecting compromise of LLM applications, MCP servers, ML supply chains, AI infrastructure, AI-powered insider threats, and RAG/vector database attacks.

Agent Compute Engine gives each AI agent a hardware-isolated microVM with container-like speed and no in-sandbox credentials. An external Agent Gateway swaps in credentials, idle agents are checkpointed, and memory is deduplicated via DAX and copy-on-write.