Security
SSH Key Permissions Too Open: Why SSH Rejects Your Key
You run ssh user@server and instead of a login prompt, you see a block of red text ending in “Permission denied (publickey).”…
Reading TLS Certificates with openssl
Certificate problems are confusing for a specific reason: the certificate is almost never the thing that is wrong, and openssl will happily…
GitHub’s Open-Source AI Fuzzing Agent: How It Works
Continuous fuzzing does not scale on its own. Even projects enrolled in OSS-Fuzz for years hide critical bugs, and the reason is…
systemd Service Hardening: A Directive Reference
A systemd service unit can confine itself in ways a container cannot: it can make parts of the filesystem read-only, hide /home…
Linux File Permissions Reference: Modes, umask, and ACLs
Almost every Linux permissions problem reduces to two misunderstandings. The first is that a permission bit on a directory means something different…
Storm-3168: Agentic Cloud Attack Hits Azure Service Principals
Microsoft has published the first detailed look at an Azure environment hit by JADEPUFFER, the actor Sysdig reported in July 2026 as…
An MCP Server Workspace Escape, and the Bug Class It Invites
AWS disclosed a vulnerability in its own open-source MCP server on October 1, 2026, and the mechanism is worth more than the…
Pgpool-II’s Watchdog Protocol, Attacked Seven Ways at Once
Pgpool-II, the connection pooler and automatic failover layer that sits in front of PostgreSQL, shipped five releases on October 1, 2026(versions 4.7.3,…
Python 3.10 Hits End of Life: Eight Final CVEs
Python 3.10 reached end of life on October 1, 2026. The final release, 3.10.22, is a security-only, source-only build, and it carries…
Apache HTTP Server 2.4.69 Fixes 20 CVEs: A Triage Matrix
The Apache Software Foundation released HTTP Server 2.4.69 on October 1, 2026 with fixes for twenty vulnerabilities. Five are rated moderate and…