CCoding Macaw Bootcamp4d ago · 4 min readMastering Red and Blue Team Operations in 2026: AI, Rust, and FAANG StandardsThe floor has moved. In 2026, artificial intelligence is no longer a bolt-on feature for SIEM platforms; it is the underlying infrastructure of the entire cybersecurity landscape. Legacy signature-bascodingmacawbootcamp.hashnode.dev
NNathanael FETUEOct 17 · 3 min readWeek 1: from zero to a verified XDP sensorBuilding AgentXDP, part 4: the week in one page. Part 1 defined the event, part 2 parsed RoCE v2 under the verifier, part 3 proved the agent needs three capabilities, not root. The problem AI clusterspegasus-nathanael-tech.hashnode.dev
NNathanael FETUEOct 16 · 5 min readNot root: proving an XDP agent needs exactly three capabilitiesBuilding AgentXDP, part 3. Part 2 parsed RoCE v2 inside an XDP program. This part is about the permission to load it: how much power the agent really needs, and how the tests prove it, on my VM and in1Npegasus-nathanael-tech.hashnode.dev
GGeorge EzejioforOct 12 · 19 min readCilium Hubble on RKE2: Microservice Traffic Observability (Seeing the Invisible)Part of the homelab build series. Every packet in my cluster already passes through Cilium's eBPF datapath on all 20 nodes. Hubble turns that into a live map of who talks to whom, with no sidecars and1georgeezejiofor.com
OOnlive ServerOct 12 · 6 min readMitigating High-Volume Volumetric DDoS at the Network Edge Using BGP Anycast and Upstream ScrubbingA dedicated server can have sufficient CPU and memory and still become unreachable during a Distributed Denial-of-Service (DDoS) attack. The problem often lies in network bandwidth. When malicious traonliveinfotech.hashnode.dev
NNathanael FETUEOct 7 · 6 min readMy RoCE testbed passed. It was lyingWhy I'm building this When a server in a GPU cluster dies, everyone knows within seconds. The failures that hurt more are the quiet ones: a link that still works but has become a bit slower, a NIC tha1Npegasus-nathanael-tech.hashnode.dev
JJayakumar SakthivelSep 11 · 15 min readTetragon: Kubernetes Runtime Security at the Kernel Level — Theory and ArchitectureIntroduction You've hardened your container images. You've written Network Policies. You've configured RBAC. You've scanned your CI/CD pipeline for vulnerabilities. And yet—a compromised container is cloudwithjk.hashnode.dev
EeServers UKSep 3 · 4 min readNetwork Engineering: Mitigating Layer 7 DDoS with eBPF and XDPA Layer 7 DDoS attack (also called an HTTP flood) overwhelms a web server by sending enormous volumes of seemingly legitimate HTTP requests rather than raw network packets. Because these attacks compleservers-uk.hashnode.dev
MManu ShuklaAug 24 · 13 min readAKS eBPF host routing hit GA on 24 August 2026 and its enable doc still says rollout may disrupt connectionsAKS eBPF host routing hit GA on 24 August 2026 and its enable doc still says rollout may disrupt connections Summary. Microsoft marked eBPF host routing in Advanced Container Networking Services (ACNSecorpit.hashnode.dev
KKamran ShaghaghiAug 19 · 12 min readMitigating OWASP LLM02: Sensitive Information Disclosure & Cloud Credential Leakage with GKE Workload Identity, CMEK and eBPF IsolationIn generative AI deployments, data is both the fuel and the primary liability. When an enterprise connects Large Language Models to internal databases, RAG vector stores, and cloud infrastructure, thecloudironguard.hashnode.dev
