Indirect Prompt Injection: When the Poison Comes From Outside
Your agent doesn't need to be attacked directly. It's enough to poison a website, a ticket or an email that it will consume automatically.
Latest articles
Prompt Injection in AI Agents: the SQL Injection of the LLM Era
A poisoned README can make your agent exfiltrate secrets. We build a lab to prove it and learn how to defend ourselves.
Disk management on Azure VMs with Terragrunt: how to map guest OS IDs to managed disks
A common scenario in teams managing Azure infrastructure with IaC: the Windows systems team opens a ticket requesting disk changes on a VM.
Cost optimization in AKS: maxPods, the invisible bottleneck
You receive a cost-optimization ticket. A classic scenario: an AKS with 3 nodes, only 2 real application pods, CPU at 8% and memory at 12%,
Dify + FastAPI: an AI Agent that Deploys Virtual Machines On Demand
We build an agent in Dify that receives natural-language specifications and automatically deploys VMs via a FastAPI + Vagrant API
Hardened Bastion on Debian 13: Extreme Hardening with KSPP, Seccomp-BPF and SIEM Telemetry
Most Linux distributions follow a default-permit model: everything is allowed until the administrator restricts it. This post inverts that m
DirtyDecrypt (CVE-2026-31635): Linux privilege escalation via rxgk pagecache write
"What is DirtyDecrypt? DirtyDecrypt (also known as DirtyCBC) is a local privilege escalation vulnerability in the Linux kernel that allows a
CVE-2026-7270: local privilege escalation on FreeBSD via exec_args_adjust_args
"CVE-2026-7270 is a local privilege escalation vulnerability in the FreeBSD kernel that allows an unprivileged user to gain root on systems
Nginx Rift (CVE-2026-42945): RCE via heap overflow in ngx_http_rewrite_module
What is Nginx Rift (CVE-2026-42945)
Fragnesia (CVE-2026-46300): LPE on Linux via ESP-in-TCP and page cache
What is Fragnesia (CVE-2026-46300)
CVE-2026-46333 ssh-keysign-pwn: Unprivileged SSH and /etc/shadow key theft
What is ssh-keysign-pwn (CVE-2026-46333)
CVE-2026-43284 + CVE-2026-43500 Dirty Frag: privilege escalation via page cache on Linux
What is Dirty Frag (CVE-2026-43284 + CVE-2026-43500)