Blog

Source-verified articles on DevOps, cloud infrastructure, AI, and SaaS.

securitymcpobservability +6
15 min read

Observability MCP Server Security: Hardening Sentry, PagerDuty, and Grafana for SRE Agents

How to harden observability MCP servers: Sentry injection risk, PagerDuty RBAC scoping, and Grafana bind hygiene. Verified configs for SRE teams.

Read →
securityai-agentsdevsecops +3
16 min read

Configuration-Based Sandbox Escape: Why Your AI Coding Agent Trusts a Settings File It Should Not

A malicious repo can flip Claude Code's security settings without any prompt injection - just by being cloned. Here is how CBSE works and the org-level hardening recipe.

Read →
securitykubernetesgitops +2
12 min read

Your Argo CD Diff View Is a Secret-Exfiltration Surface: Hardening GitOps After CVE-2026-42880

CVE-2026-42880 exposes plaintext Kubernetes Secrets to any Argo CD user via the diff view. Patch floor, RBAC hardening playbook, and secrets architecture.

Read →
securitymlopspython +2
16 min read

Your Model Registry Is an RCE Vector: Pickle Deserialization in MLOps

Pickle deserialization in MLOps turns model files and inference RPC sockets into RCE vectors. Learn how to harden your model registry and serving pipeline.

Read →
securityai-agentsdevsecops +4
15 min read

Your AI Coding Assistant Is an Insider Threat: How Hidden Instructions in CLAUDE.md and .cursorrules Poison Agents

How AI coding assistant config poisoning works: TrapDoor hid exfiltration instructions in CLAUDE.md. Defense playbook for platform and security teams.

Read →
securitydevsecopssupply-chain +4
18 min read

Your AI Coding Assistant Plugin Is the New Supply Chain Attack Surface: Securing IDE Marketplaces for Dev Teams

Malicious JetBrains plugins stole AI API keys from 70K devs. Platform defense: IDE allowlists, LLM gateway brokering, egress detection, key rotation.

Read →
securitydevsecopsai-agents +3
15 min read

Vibe Coding's Security Debt: The AI-Generated CVE Surge

74 confirmed CVEs traced to AI-generated code. 45% OWASP failure rate. Learn how to build the CI/CD security pipeline your AI coding tools require.

Read →
kubernetesllmgpu +3
15 min read

Beyond vLLM: Running Distributed LLM Inference Across Multiple GPU Nodes on Kubernetes with llm-d

The hands-on guide for platform teams hitting the single-node wall: tensor vs pipeline parallelism, native multi-node vLLM, LeaderWorkerSet, and llm-d wide expert parallelism.

Read →
ai-agentsplatform-engineeringdeveloper-tools +2
17 min read

From Vibe Coding to Spec-First: How Agentic IDEs Are Redefining Engineering Process

Engineering leads explain how Kiro, Cursor Plan Mode, and Claude Code implement spec-first development — and how to enforce compliance at org scale with CI gates and EARS linting.

Read →
securityai-agentskubernetes +2
15 min read

Stop Giving AI Agents Real Credentials: Egress Gateways and Credential Vaulting on Kubernetes

AI agent egress gateways remove real secrets from the agent's reach. Category analysis vs NetworkPolicy, Cilium, LLM gateways, and sandboxes.

Read →

No articles match your search.