Tessera
Folgen

Ludovic Alarcon

@ludovicalarcon.bsky.social

Cloud enthusiast, Kubernetes lover and DevOps adopter A French guy lost in South Korea 🇰🇷 Blog: ludovic-alarcon.com

65 Posts123 Follower229 Folgt
Catalin Cimpanu@campuscodi.risky.biz · 3mo ago

Apple has open-sourced corecrypto, the foundational cryptographic library in Apple operating systems security.apple.com/blog/formal-... github.com/apple/corecr...

A blueprint for formal verification of Apple corecrypto - Apple Security Research

With the latest release of corecrypto, we’re publishing our implementations of quantum-secure ML-KEM and ML-DSA algorithms, along with the mathematical proofs we built to assure they are faithful to t...

security.apple.com

Chris Short@chrisshort.net · 4mo ago

SELinux Volume Label Changes goes GA (and likely implications in v1.37) #devopsish #kubernetes

SELinux Volume Label Changes goes GA (and likely implications in v1.37) | Kubernetes

If you run Kubernetes on Linux with SELinux in enforcing mode, plan ahead: a future release (anticipated to be v1.37) is expected to turn the SELinuxMount feature gate on by default. This makes volume setup faster for most workloads, but it can break applications that still depend on the older recursive relabeling model in subtle ways (for example, sharing one volume between privileged and unprivileged Pods on the same node). Kubernetes v1.

kubernetes.io

InfoSec@infosec.skyfleet.blue · 6mo ago

Anthropic Launches Claude Code Security to Scan Codebases for Security Vulnerabilities

Anthropic Launches Claude Code Security to Scan Codebases for Security Vulnerabilities

A new feature inside Claude Code enables developers and security teams to identify and remediate vulnerabilities across their codebases, known as Claude Code Security. Currently available in a limited research preview, the tool offers AI-powered code scanning that goes beyond conventional static analysis by understanding how code actually works, not just what it contains. Traditional tools often rely on rule-based scanning to check for known vulnerability patterns, such as hardcoded passwords or missing encryption. While effective to a point, they often miss complex or context-dependent flaws, such as logic errors or insufficient access controls, that attackers can exploit. Smarter Detection and Verification Each vulnerability identified by Claude undergoes a multi-layered verification process . The system re-examines its own detections to minimize false positives and assigns severity and confidence ratings to each result. Findings then appear in the Claude Code Security dashboard, where teams can review suggested patches and approve the final fixes. Nothing is applied automatically; users maintain full control over remediation steps. Anthropic’s move follows a growing need for automation in vulnerability management. Security teams worldwide face overwhelming backlogs as the number of identified software flaws continues to soar. The launch builds on more than a year of research by Anthropic into Claude’s cybersecurity potential. By supplementing human expertise with AI-driven insights, Claude Code Security aims to ease that workload while maintaining accuracy and accountability. Feature Description AI vulnerability detection Scans code for security issues and suggests fixes for review. Context-aware analysis Understands data flow and component interactions to find complex flaws. Multi-stage verification Rechecks findings to reduce false positives. Severity ratings Assigns priority levels and confidence scores to issues. Human review Developers review and approve suggested fixes. Security dashboard Shows validated issues and tracks remediation progress. Powered by Claude Opus 4.6 Uses the latest Claude model to detect serious vulnerabilities. Defender-focused design Helps security teams manage growing vulnerability backlogs. Anthropic’s internal Frontier Red Team has tested these capabilities through hackathons, collaboration with the Pacific Northwest National Laboratory, and real-world applications. Using  Claude Opus 4.6, released earlier this year , the AI reportedly helped uncover over 500 previously undetected vulnerabilities in open-source projects, some of which had remained hidden for decades despite extensive human oversight. As AI continues to transform both offensive and defensive cybersecurity operations, Anthropic positions Claude Code Security as a tool for defenders to stay ahead of emerging AI-enabled threats. The company envisions a future in which most global codebases are continuously scanned by intelligent systems that predict and prevent attacks before they occur. Enterprise and Team customers can now request early access to Claude Code Security. At the same time, open-source maintainers are invited to join a fast-tracked preview program. Follow us on Google News , LinkedIn , and X for daily cybersecurity updates. Contact us to feature your stories. The post Anthropic Launches Claude Code Security to Scan Codebases for Security Vulnerabilities appeared first on Cyber Security News .

cybersecuritynews.com

Kubernetes@kubernetes.io · 6mo ago

⚠️ Kubernetes ingress-nginx retires March 2026. Key statements: • No security patches after retirement. • Ingress-nginx powers ~50% of environments. • Migration to Gateway API is recommended. • There are no direct drop-in replacements. Read more: kubernetes.io/blog/2026/01...

Ingress NGINX: Statement from the Kubernetes Steering and Security Response Committees

In March 2026, Kubernetes will retire Ingress NGINX, a piece of critical infrastructure for about half of cloud native environments. The retirement of Ingress NGINX was announced for March 2026,…

kubernetes.io

Quentin - adorateur de ☕@une-tasse-de.cafe · 6mo ago

v0.0.1 en ligne ! 🎉 Hésitez pas à faire des retours (et à contribuer si ça vous botte😁) github.com/qjoly/talosc...

GitHub - qjoly/talosctl-oidc: OIDC certificate exchange server and client for Talos Linux. Enables OIDC-based access control for talosctl by issuing ephemeral short-lived client certificates signed by...

OIDC certificate exchange server and client for Talos Linux. Enables OIDC-based access control for talosctl by issuing ephemeral short-lived client certificates signed by the Talos CA. - qjoly/talo...

github.com

Bill Mulligan 🐝🐝🐝@breakawaybilly.bsky.social · 6mo ago

When thinking about how to deliver kernel events from eBPF to user space, a lot of people turn to perf buffers or ring buffers. Maybe instead it is time we rethink what we are actually trying to do with that data instead of just trying to move it faster?

Different Ways To Deliver Kernel Events from eBPF to User Space | iximiuz Labs

In this tutorial, you’ll learn how eBPF applications send kernel events into user space using perf buffer and ring buffer, exploring their design, trade-offs, and performance implications. You’ll…

labs.iximiuz.com

William (Bill) Kennedy@goinggo.net · 6mo ago

Kronk 1.19.2 is the best version yet. Lot's of performance gains. Kronk is being designed for specific and targeted apps and single developer use IMC: Incremental message caching provides a performance boost when using local models and agents like Cline or Kilo #golang github.com/ardanlabs/kr...

GitHub - ardanlabs/kronk: This project lets you use Go for hardware accelerated local inference with llama.cpp directly integrated into your applications via the yzma module. Kronk provides a high-lev...

This project lets you use Go for hardware accelerated local inference with llama.cpp directly integrated into your applications via the yzma module. Kronk provides a high-level API that feels simil...

github.com