AI tools, cybersecurity and development news aggregated from top sources — saved permanently with unique URLs.
'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets
A PNG hiding a prompt injection could steal your repo's secrets, researchers demonstrate. The techni…
Outil de Cybersécurité du Jour - Jul 11, 2026
L'outil de cybersécurité moderne : Wireshark Aujourd'hui, la cybersécurité est plus cruciale que j…
Kubernetes NetworkPolicies — default-deny done right
Default-deny and per-consumer allowlists. 💡 In plain terms: By default every pod can talk to every…
Centinela: un centinela de ciberseguridad personal para Linux/WSL.
Centinela: un centinela de ciberseguridad personal para Linux/WSL que solo contiene con tu confirmac…
Vault auth methods — OIDC for humans, Kubernetes for workloads
Humans via SSO, workloads via service accounts. Think of Vault as a secured building with two entra…
Helm template functions, pipelines & named templates
DRY templates with helpers. If the templating engine is the language, functions and named templates…
OpenMandriva Sabotage Exposes Open-Source Trust Risks
What Actually Happened: Dispute, Access, and Alleged Sabotage OpenMandriva, a Linux distribution t…
Per-tenant transactions in Go with pgx: SET LOCAL search_path, and why every schema name goes through QuoteIdent
This is the third post in a series where I build a multi-tenant API gateway in Go out in the open. T…
The mv Command Mistake That Can Destroy Digital Evidence in Seconds
At 2:47 AM, a junior engineer ran a routine Linux command to quarantine a suspicious file during a l…
Cloudflare D1's dual-mode adapter solves the security-vs-DX tradeoff: registry mode locks prod to an SQL allowlist (injection-proof even if keys leak), and SQL mode keeps dev fast and flexible. Auto-picks the right one per environment.
D1 Remote Modes: How Cloudflare D1 Balances Security and DX …
Kustomize bases & overlays — one base, every environment
dev, staging, prod from one base. A Kustomize base is a master recipe; overlays are the diners' twe…
Argo CD sync policies & self-heal, explained
Auto-sync, prune, self-heal. A syncPolicy is the thermostat setting for an Argo CD Application. Arg…