XXccelera AI·1d agoBatch-Fixing CVEs Across Repos With AI AgentsLearn how AI agents batch fix CVEs across repos: dedupe findings, upgrade packages, test every fix, and open reviewed pull requests with evidence.6 min read·xccelera.hashnode.dev
RRONI DAS·2d agoHow one click put passwords on GitHub: coding agents, allow lists and leaked secretsApiiro found a real secret in 1,122 public copies of one Claude Code settings file. Here is how a password gets from your terminal into a public repo, why deleting the file does not fix it, and what to do instead.7 min read·systemdesignacademy.hashnode.dev
JJenna's Runbooks·3d agoDefending an MCP server against prompt injection through CloudTrailMicrosoft's spotlighting defense in its simplest form, and the layers that make it enough5 min read·blog.jennasrunbooks.com21O
Pprakash888kp·3d agoThe RAG Change That Looked Fine — Until Production Users Caught ItWhy green CI and a polished notebook still shipped a broken retrieval system — and how SentinelRAG turns retrieval, grounding, and ingest trust into merge-blocking CI gates14 min read·arcwinglabs.hashnode.dev3A
GGinny Ibe·4d agoMy Kubernetes Cluster Disappeared. Rebuilding It Changed How I Troubleshoot.Lessons from Kubernetes Week 12: rebuilding AWS EKS, troubleshooting node groups developing an evidence-based AI incident-response workflow.3 min read·ginnyibe.hashnode.dev1O
UUmer Amin Durrani·4d agoAI Agents in DevOps: A Safer Path from Pull Request to ProductionA practical guide to AI agents in DevOps: least privilege, human review, CI/CD checks, audit trails and tested rollback before production changes.4 min read·umeramindurrani.hashnode.dev
MMarius-Florin Cristian·6d agoThreat modelling a data flow with STRIDEDraw the data flow in OWASP Threat Dragon, then go through each element and flow with STRIDE: the boundary, the data, each threat and its control.1 min read·keibidrop.hashnode.dev1D
AAI CodeOps·Nov 4Our AI's Security Audit Flagged a Bug We Never Asked It to FixWe gave a set of AI agents a small, realistic task on a demo shopping cart: discount codes now come from user input, so validate them. Trim whitespace, uppercase, letters and digits only, 20 character2 min read·aicodeops.hashnode.dev
AAmaresh Pelleti·Nov 4GitHub Actions Lockfile Guide: How actions.lock WorksOriginally published on DevToolHub. GitHub Actions workflow lockfiles went into public preview on October 14, 2026 and became generally available on October 28. The timing is almost funny: GitHub aut13 min read·devtoolhub.hashnode.dev
CCyber Knight·Nov 4The Attacker Didn't Break Into Production. It Walked In Through DevelopmentChainstack's breach started in a dev environment, reached production five days later, and stayed quiet — until the company said the honest thing about its customers' keys.4 min read·nulltrace.hashnode.dev
