TTTracenyx Teaminblog.tracenyx.ai·22h ago · 8 min readAnything can talk to anything: the Kubernetes default quietly expanding your blast radiusIn many Kubernetes clusters, the default network policy is effectively simple: Anything can talk to anything. A public-facing frontend may be able to connect directly to a payment database. A monitori63VN
TTTracenyx Teaminblog.tracenyx.ai·Jul 6 · 8 min readGetting a kernel driver through Microsoft certification as a bootstrapped startupThere is no shortcut. We checked. When people hear "signed kernel driver," they usually think of attestation signing: you sign your driver with an EV certificate, submit it to Microsoft's portal, atte00
TTTracenyx Teaminblog.tracenyx.ai·Jul 2 · 7 min readWhy eBPF stops at the Windows node boundary — and what we built insteadThe blind spot nobody talks about If you run Kubernetes in a large enterprise — a bank, an insurer, a hospital network, a government department — there's a decent chance your cluster isn't all Linux. 00
TTTracenyx Teaminblog.tracenyx.ai·Apr 10 · 7 min readHow Zero Trust Egress Policy Contains a Supply Chain Attack — The Axios npm CaseApril 2026 · Tracenyx Security Team On March 31, 2026, engineers across the world woke up to a serious supply chain attack. Two versions of Axios — the JavaScript HTTP client with over 100 million we00
