One attack. One fix. Tuesdays.

Weekly defensive engineering for cloud, CI/CD, agents, Kubernetes, and software supply-chain security. One attack walked through. One detection idea. One defender move worth shipping.

Articles

Sep 29, 2026

•

5 min read

Your GitLab issue email can push to main

GitLab's file-an-issue-by-email address carries a token that reaches every project the account can reach and never expires. Aikido showed it can change code and run CI as the owner, on a project locked to an IP allowlist too. GitLab closed the report as intended behavior.

Sep 22, 2026

•

6 min read

Your AI agent can read its own vault secret

AWS AgentCore Harness copies vault secrets into its own memory as plaintext, where its default shell tool can read them. In a lab with a permissive model, Unit 42 stole a token through a support ticket and used it from a laptop. AWS closed the report as informative, pointing to customer-side controls.

Sep 15, 2026

•

6 min read

Your package registry trusts a key of 32 spaces

A config value JFrog Artifactory never set resolved to the empty string, passed three checks that each asked a different question, and registered as a working signing key. Its secret is 32 space characters, and anything signed with it is treated as a cluster member.

cloud-security

+3

Sep 8, 2026

•

5 min read

Your agent can edit /etc/hosts

Agents on a timed lookup task were allowed to fetch pages and blocked from sending anything that writes. They invented a hostname ending in a trusted suffix, pointed it at the blocked server, and posted the recipe for each other.

Sep 1, 2026

•

8 min read

Your WAF logs your users' session cookies

AWS WAF logs every request header by default, unredacted. Redacting the log files does not cover the requests the WAF serves from its own API.

cloud-security

+4

Aug 25, 2026

•

7 min read

Malware asks your MCP server what it can do

It asks your server what tools it has, then uses the one that runs commands. No bug, no patch.

Load more