Tag feed

#product-security

12 posts0 followers

Explore Hashnode

Alternatives

Trending tags this week

RRushikeshoffensivebytes.com6d ago · 20 min read

Bridging the Semantic Gap: Agentless Runtime Detection via Hypervisor Traps

The Hook What if I told you that you can monitor every process, syscall, and memory allocation inside a running VM, without installing a single byte of software on it? No agent, no driver, no kernel m

9

DRJSL

RRushikeshoffensivebytes.comFeb 6 · 23 min read

Protocol Zero: Securing Agentic AI and the Model Context Protocol (MCP)

Executive Summary As the calendar turns to February 2026, the artificial intelligence landscape has undergone a fundamental phase transition. We have moved beyond the era of Generative AI characterized by the synthesis of text and media into the era ...

0

ADArshan Dabirsiaghiblog.pixee.aiDec 8, 2025 · 4 min read

React2Shell: The Next Struts2-Style Bug Parade?

The React2Shell bug is giving me major déjà vu, and I think there are important lessons here in Abstract vs. Concrete Risk (maybe in B2B sales too—I haven’t fully thought that part through yet). In the 2010s, the Apache Struts team made (what appears...

0

ARArkcore Research Labsresearch.arkcore.ioNov 29, 2025 · 5 min read

Triaging CVE-2017-14492: dnsmasq Heap Overflow with Our Platform

void icmp6_packet(time_t now) { char interface[IF_NAMESIZE+1]; ssize_t sz; int if_index = 0; struct cmsghdr *cmptr; struct msghdr msg; union { struct cmsghdr align; /* this ensures alignment */ char control6[CMSG_SPACE(sizeof(str...

0

RRushikeshoffensivebytes.comSep 10, 2025 · 41 min read

Data Exfiltration in Modern Environments: A Comprehensive Threat and Defense Handbook

Executive Summary: In recent years, attackers have continuously developed sophisticated methods to extract sensitive data from organizations. This guide catalogs aa known exfiltration techniques documented from 2020–2025, spanning network protocols, ...

1

J

HKHarshit Kocharsupply-chain-security.hashnode.devAug 30, 2025 · 5 min read

$0 Supply-Chain Security Lab

Summary — I hardened a tiny Node.js repo using only free tooling: PR gates (branch protection, Dependency Review, secrets scanning), repo posture checks (OpenSSF Scorecard), SBOM + vulnerability gating (Syft → CycloneDX + Grype), and verifiable build...

0

RRushikeshoffensivebytes.comJun 30, 2025 · 15 min read

Attackers Love Your YAML: Static Kubernetes Security Analysis for DevSecOps

Kubernetes has become the de facto container orchestration platform, powering critical cloud workloads across industries. However, its flexibility comes with risk: if Kubernetes manifests (YAML files defining Pods, Deployments, Services, etc.) are wr...

1

M

DGDeepak Gargsekurity.hashnode.devMay 31, 2025 · 5 min read

Use Syft and Grype to cement your Software Supply Chain Security

Why Software Supply Chain Security Is More Critical Than Ever In an era where open-source software forms the backbone of most SaaS products, managing dependencies, identifying vulnerabilities, and maintaining software transparency have become fundame...

0

J&Justin & Michaelnotyourcryptopodcast.comAug 28, 2024 · 1 min read

Why are we here..?

Web1, Web2, Web3. Why does it matter? In the digital age code is power, so whoever controls the runtime controls the world. The platform age is ending. Web3 isn’t a slow database, its an alternate runtime for the web. Join us on the precipice as we b...

0

#product-security

Search Hashnode

#product-security

Explore Hashnode

Trending tags this week

Bridging the Semantic Gap: Agentless Runtime Detection via Hypervisor Traps

Protocol Zero: Securing Agentic AI and the Model Context Protocol (MCP)

React2Shell: The Next Struts2-Style Bug Parade?

Triaging CVE-2017-14492: dnsmasq Heap Overflow with Our Platform

Data Exfiltration in Modern Environments: A Comprehensive Threat and Defense Handbook

$0 Supply-Chain Security Lab

Attackers Love Your YAML: Static Kubernetes Security Analysis for DevSecOps

Use Syft and Grype to cement your Software Supply Chain Security

Why are we here..?