Anteckningar för ingenjörer som bygger snabb, hård produktionsmjukvara.
Filtrera efter disciplin. Begränsa efter format. Gå direkt till de artiklar som passar arbetet.
SToFU Systems undersöker hur en post-checkout-hook i Git i ett projektarkiv från en kund kunde ladda ned och köra fjärrkod. Programmet i det andra steget erhölls inte.
A practical owner-level note on the Virtualizor BGP hijack, malicious updates, hypervisor persistence, update trust, and infrastructure evidence.
A practical owner-level note on GitSpawn, AI coding agents, malicious repository handoffs, developer endpoint exposure, and CI/CD secret risk.
A practical owner-level note on Cisco Nexus 9000 root RCE, network control-plane exposure, management reach, segmentation, and customer-ready proof.
A practical owner-level note on GPUThor, shared GPU tenancy, hardware isolation, monitoring, AI infrastructure, and customer proof.
A practical owner-level note on TeamPCP, trusted security tools, CI/CD authority, AI gateways, supply-chain exposure, and evidence.