What the ECB's AI cybersecurity letter means for banks: microVMs, containers, Firecracker, and Kata Containers for isolating AI agents.

Learn how to harden VS Code against malicious tasks and extensions, use Workspace Trust safely, and inspect untrusted repositories before opening them.

NIS2 and DORA fail when only security owns them. A Kubernetes platform RACI, plus the artefacts engineering managers must put on the board.

Kubernetes 1.37 security: three stable advances in workload identity and SELinux, plus three alpha features shaping the future of cloud native security.

Grok Bot is an AI engineering system that manages coding agents. This article explains why senior engineers and engineering leaders still provide the judgment, verification, and risk control AI agents...

Learn how Kubernetes audit logs and HAProxy logs complement CNAPP posture and runtime security to give SOC analysts actionable evidence.

Apply for Devsecops Engineer at ReeVo Cloud & Cyber Security in Vimercate, Lombardy, Italy. Full-time Mid-Senior level role. See responsibilities, qualifications, and similar jobs on LinkedIn.

A verified Apple Container Kubernetes walkthrough on macOS: recover a kubeadm cluster, load local images without a registry, and evaluate SIGHUP Distribution.

CVE-2026-64564 (SCTPhantom) is a critical Linux kernel use-after-free in SCTP ASCONF with a high CVSS score and a demonstrated container escape. A DevSecOps threat-modeling walkthrough of when to care...

OWASP released the GenAI LLM Top 10 2026, the first edition grounded in 7,714 real AI security incidents. Prompt Injection stays at number one. Excessive Agency climbs. Misinformation is the widest ga...

Shadow AI turns ungoverned coding assistants and agents into a live threat across CI/CD. A stage-by-stage threat model from developer laptop to Kubernetes pod, with the executive controls and tooling ...

Why a centralized secrets manager is non-negotiable in 2026: the operational limits of git-crypt and sealed-secrets style tools, the DORA and NIS2 mandate, and why OpenBao is now the open source secre...

ECB letter on AI-enabled cybersecurity threats: action plan due October 2026, ITRQ deadline extension, CNAPP, hardened images, SBOMs and DORA resilience.

Local AI meeting minutes on Apple Silicon: on-device transcription with speaker diarization, then minutes from a 14B model through Docker Model Runner and Docker Agent. No cloud, no data flow to third...

TLS and PKI explained from the ground up: what an X.509 certificate actually contains, how the chain of trust works, what happens during a TLS handshake step by step, and how Kubernetes builds a full ...

Why hardened container image catalogs are non-negotiable in 2026: the technological case, the DORA mandate, and the NIS2 obligations explained.

Engineering managers are the real culture carriers in your organization. McKinsey 2026 data explains why CTOs must prioritize investment in their middle management layer.

Athena is a new industry coalition for coordinated open source vulnerability defense. Here is what it means for DevSecOps teams and security leaders.

Hands-on Apple container 1.0 test of container machine on macOS, covering home-mount security, networking, systemd, and Docker or Podman alternatives.

A review of Anthropic's Zero Trust for AI Agents eBook: a practical security framework for deploying autonomous AI agents, covering threat modeling for security leaders and an implementation guide for...

Cloud Native Days Italy 2026 wrapped up in Bologna. A personal recap from one of the organizers: speakers, MCs, sponsors, and a community worth celebrating.

Hands-on review of SentinelOne's purple-mcp: how to connect Singularity alerts, vulnerabilities, and threat hunting to Claude Code for faster SOC triage.

North Korea's Lazarus Group embeds malware in git hooks to compromise developers through fake job interviews. Attack breakdown and five practical defences.

CVE-2026-31431 Copy Fail is a local privilege escalation in the Linux kernel exploitable with a 732-byte Python script. This post covers what it is, how to fix it, what to do when patching isn't immed...

Ubuntu 26.04 LTS 'Resolute Raccoon' just shipped. For teams running RHEL or Ubuntu on servers, this post breaks down what actually changed in security and container/Kubernetes workloads compared to 24...

Bitwarden CLI, Trivy, and Axios compromised in three weeks. Your EDR won't catch postinstall scripts. 8 practical controls to reduce the blast radius.

Kubernetes 1.36 releases tomorrow with a significant security focus: the end of Ingress NGINX, SELinux volume labeling reaching GA, and a set of long-overdue removals that tighten the security posture...

Back from KubeCon EU 2026 with a free Copilot Pro+ subscription, I turned my attention to the security posture of apple-container-tui. Here's how I added Dependabot and OpenSSF Scorecard using GitHub ...

A comprehensive analysis of the March 2026 Trivy supply chain incident: from malicious GitHub Actions to the self-propagating CanisterWorm.