securitydevsecopssupply-chain +4
Your AI Coding Assistant Plugin Is the New Supply Chain Attack Surface: Securing IDE Marketplaces for Dev Teams
Malicious JetBrains plugins stole AI API keys from 70K devs. Platform defense: IDE allowlists, LLM gateway brokering, egress detection, key rotation.
securitydevsecopsai-agents +3
Vibe Coding's Security Debt: The AI-Generated CVE Surge
74 confirmed CVEs traced to AI-generated code. 45% OWASP failure rate. Learn how to build the CI/CD security pipeline your AI coding tools require.
Beyond vLLM: Running Distributed LLM Inference Across Multiple GPU Nodes on Kubernetes with llm-d
The hands-on guide for platform teams hitting the single-node wall: tensor vs pipeline parallelism, native multi-node vLLM, LeaderWorkerSet, and llm-d wide expert parallelism.
ai-agentsplatform-engineeringdeveloper-tools +2
From Vibe Coding to Spec-First: How Agentic IDEs Are Redefining Engineering Process
Engineering leads explain how Kiro, Cursor Plan Mode, and Claude Code implement spec-first development — and how to enforce compliance at org scale with CI gates and EARS linting.
securityai-agentskubernetes +2
Stop Giving AI Agents Real Credentials: Egress Gateways and Credential Vaulting on Kubernetes
AI agent egress gateways remove real secrets from the agent's reach. Category analysis vs NetworkPolicy, Cilium, LLM gateways, and sandboxes.
securitykubernetescicd +4
Defending Kubernetes CI/CD Against Self-Replicating npm Worms
Kubernetes CI/CD is the real target. Falco rules, Kyverno policies, NetworkPolicy YAML, and npm hardening to defend against Miasma and IronWorm.
securityai-agentskubernetes +3
AI Agent Credential Crisis: Why IAM Is the Real Attack Surface
Six 2026 AI coding agent exploits targeted credentials, not models. Here's why traditional IAM fails for agents and the four-layer Kubernetes fix.
securitykuberneteshttp2 +3
HTTP/2 Is Your Kubernetes Ingress's Weakest Link: From Compression Bombs to Rapid Reset
CVE-2026-49975 exhausts 32 GB of server memory in seconds. ingress-nginx won't be patched. Per-controller hardening guide for Envoy, NGINX, and HAProxy.
supply-chain-securitydeveloper-securitygithub-actions +4
Developer Tooling Under Siege: May 2026's Attack Surface Convergence
Four attacks hit developer workstations in May 2026: GlassWorm, TrapDoor, Nx Console, and Megalodon. What happened, how they connect, and what to do now.
NSA MCP Security Design Considerations: What Platform Engineers Need to Know
The NSA released its first MCP security guidance with 9 recommendations. Here is how to implement 8 of them today with Kubernetes-native controls.