Cloudflare Traces — Follow a Request From Edge to Origin
·915 words·5 mins
Cloudflare Traces reveals where requests are blocked or delayed across rules, cache, Workers, and origin—without confusing edge time with app time.
- Osmond van Hemert — Senior Software Engineer & Applied AI/
- Blog Tags: Software Development, AI, Security & Infrastructure/
- Cybersecurity Across Software & Cloud/
Cybersecurity Across Software & Cloud
Cybersecurity is not confined to incident reports. This tag follows threats and defenses across software dependencies, cloud platforms, developer tooling, and operational practice. Browse the list below when you want the security angle on those topics, even when security is not the post’s primary category.
For articles organized primarily as security analysis, use the Security category. To follow a particular threat pattern, explore the Supply Chain Security series.
Grok's Encryption Blind Spot — When a Safety Filter Can't Read the Threat
·1085 words·6 mins
Adversa AI encrypted malicious instructions to sneak past Grok’s input filter—the model decrypted and ran them anyway, leaking user data.
CertiGhost (CVE-2026-54121) — AD CS DC Impersonation
··1096 words·6 mins
CertiGhost is an AD CS privilege-escalation flaw: in a tested CA configuration, a low-privilege domain user could impersonate a DC. Patch affected hosts.
SharePoint CVE-2026-50522 — Machine-Key Theft Risk
··941 words·5 mins
SharePoint CVE-2026-50522 was exploited after July’s patch; machine-key theft means compromised farms need investigation and key rotation, not patching alone.
Zero-Day Web Framework Vulnerabilities — Response Strategies
·2152 words·11 mins
Zero-day web framework vulnerabilities expose how slow coordinated patching can be—and why defense-in-depth matters more than fast patching alone.
Anthropic's AI Framework Automates Vulnerability Discovery
··1742 words·9 mins
Anthropic released an open-source framework for automated vulnerability discovery powered by AI.
TanStack NPM Supply Chain Compromise — A Postmortem
··2143 words·11 mins
A massive npm supply chain attack compromised TanStack, Mistral AI’s client library, and over 170 packages.
Supply Chain Malware in PyTorch Lightning — AI's Attack Surface
··1190 words·6 mins
A Dune-themed malware campaign targeting the PyTorch Lightning library highlights how AI/ML supply chains are becoming prime targets for sophisticated attacks.
The xz Utils Aftermath — One Year Later, What Have We Fixed?
··1213 words·6 mins
Nearly two years after the xz Utils backdoor shocked the open source world, the supply chain security landscape has changed — but not enough.
Software Supply Chain Security Gets Serious — SLSA and SBOM Rise
··1231 words·6 mins
Supply chain security frameworks like SLSA and SBOM requirements are moving from recommendations to mandates.
Post-Quantum Cryptography — The Migration Clock Is Ticking
··861 words·5 mins
NIST’s post-quantum cryptography standards are finalized, and the migration timeline is no longer theoretical — it’s operational.
Ultralytics Supply Chain Attack — Dependencies Bite Back
··969 words·5 mins
A supply chain attack on the popular Ultralytics YOLO package highlights the persistent vulnerability of the Python ecosystem’s distribution pipeline.