Tag: #cve
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 6 posts
6 posts are tagged #cve; the most recent was published on 2026-09-10.
Often tagged together: #security 5 #docker 2 #kubernetes 2 #2026-03 1 #air-gap 1
Most read in the last 90 days:
- Bug Bounty & VDP Platforms 2026 — HackerOne / Bugcrowd / Intigriti / Synack / YesWeHack / Immunefi / Code4rena / Anthropic Model Safety Deep Dive
- Scanning the production image with Trivy — 768 findings, and the real work was three packages and one Dockerfile line
- GhostLock: a stack use-after-free that hid in Linux rtmutex for 15 years (CVE-2026-43499)
Scanning the production image with Trivy — 768 findings, and the real work was three packages and one Dockerfile line
From a signature-verification bypass in the login library (CVE-2026-27962) to a digest-pinned base image that could never receive OS security fixes. The scanner counting itself, false positives in secret detection, and a
2026-09-10 · 6 min read #security#cve#trivy#docker#pythonThe Air-Gapped Operations Playbook — Keeping Up with Security Patches, Rolling Back, and Managing CVE Lag
The story that begins after the transfer procedure is finished — the operations chapter, about running an air-gapped network for years. It first makes clear that slow CVE response inside an air-gapped network is not team
2026-08-14 · 13 min read #linux#rhel#air-gap#dnf#securityThe 18 CVEs in curl 8.21.0 — the "High-Quality Chaos" That Followed the End of the Bug Bounty
On June 24, 2026, curl 8.21.0 set a new project record by shipping 18 CVEs in a single release. Yet all 18 are Low or Medium, and there hasn't been a single High since October 2023. Behind that number is a project that,
2026-07-17 · 15 min read #network#security#curl#cve#open-sourceGhostLock: a stack use-after-free that hid in Linux rtmutex for 15 years (CVE-2026-43499)
GhostLock (CVE-2026-43499) is a stack use-after-free in the Linux kernel's real-time mutex code that, per the nebusec.ai IonStack part II writeup, sat in mainline from 2.6.39-rc1 in 2011 until a fix in April 2026 — about
2026-07-11 · 6 min read #linux-kernel#security#use-after-free#privilege-escalation#rtmutexBug Bounty & VDP Platforms 2026 — HackerOne / Bugcrowd / Intigriti / Synack / YesWeHack / Immunefi / Code4rena / Anthropic Model Safety Deep Dive ♪ Listenable
In 2026 the bug bounty industry has finished a whole season. HackerOne pushed back its IPO and tilted toward managed services, Bugcrowd leans on AI triage, and across Europe Intigriti has become the de-facto standard. Sy
2026-05-16 · 20 min read #bug-bounty#vdp#hackerone#bugcrowd#intigritiSecurity vulnerability action playbook: OS package, container image, runtime hardening
We organize a practical security operation playbook that covers everything from CVE discovery to action, verification, and reporting, OS package vulnerability patching, container image security, and runtime hardening.
2026-03-07 · 16 min read #devops#security#vulnerability#cve#container