Security
FortiMail CVE-2026-104286: Actively Exploited, No Patch Yet
Fortinet has disclosed a pre-authentication flaw in FortiMail with a CVSS score of 9.8, and CISA added it to its Known Exploited…
Detect Expiring IAM Access Keys With a Bash Audit Script
Audit IAM access keys by age and last use with a read-only Bash script, then rotate one key at a time without…
AI Coding Agents Are Changing Software Development: What Developers Need to Secure
Coding agents write branches, not main. Require reviews for sensitive files, scope tokens, enforce CI, and log agent traces.
What Happens When an AI Agent Gets Root Access?
Root turns a mistaken tool call into full host compromise: keys, firewall, logs, and persistence. Why it happens and how to remove…
How AI Agents Can Attack Software Supply Chains
Agents with publish tokens and no review can poison registries. What the reported RubyGems incident shows and how to lock down tokens,…
AI Agent Security: Linux Permissions, Sandboxing, and Least Privilege
Apply least privilege to AI agents: dedicated users, tight file modes, single-command sudo, systemd confinement, and secret separation.
Build a Sandboxed AI Agent on Ubuntu Using Docker
Run an AI agent in a locked-down Docker container on Ubuntu: read-only root, dropped capabilities, no network by default, and narrow mounts.
How to Secure AI Agents Running on Linux
Run AI agents as dedicated non-root users, contain them with Docker, strip secrets, and log every tool call. Practical Linux controls with…
How to Protect Git Repositories From AI Agent Abuse
Give an AI agent full repo access and it will use it. How to scope tokens, lock main, force human review, and…