Tag / The engineering notebook
Security
6 articles and notes on this topic.
October 2026 in Security: Attackers Went for the Keys, and AI Outpaced Our Patching
October 2026 showed two shifts at once: attackers went after the places where credentials pile up, and AI started finding bugs faster than most teams deploy fixes. Here is what Binance, LiteLLM, Railway, ConnectWise, PHP2Shell and Node2Shell teach, and the changes developers and IT leaders should make now.
NVIDIA OpenShell: Policy-Enforced Sandboxes for Autonomous Coding Agents
NVIDIA just open-sourced OpenShell, a policy-enforced sandbox for autonomous AI agents. Four security layers, a privacy router that decides which LLM sees which data, and hot-reloadable YAML policies. How it works and what it solves that nothing else does.
Bảo mật ứng dụng viết bằng vibe coding: hướng dẫn thực tế để tránh bị tấn công
Vibe coding giúp đưa ứng dụng ra thị trường nhanh hơn, nhưng cũng làm tăng nguy cơ phát hành lỗ hổng bảo mật. Bài viết phân tích các sự cố thực tế, quy trình phòng thủ nhiều lớp và những phương pháp rà soát bảo mật mới với AI.
Securing Vibe-Coded Apps: A Practical Guide to Not Getting Hacked
Vibe coding is shipping apps faster than ever, but also shipping vulnerabilities at alarming rates. This guide covers real disasters, practical security measures from secret scanning to endpoint hardening, and SOTA AI-powered review methods to keep your vibe-coded apps from becoming the next breach headline.
Agent Sandboxes: A Practical Guide to Running AI-Generated Code Safely
AI agents don't just talk. They execute code, which makes isolation the whole problem. The sandbox technologies that matter (microVMs, gVisor, WebAssembly) and the platforms built on them (E2B, Modal, Northflank).
Sandbox cho AI agent: chạy code do AI sinh ra sao cho an toàn
AI agent không chỉ sinh văn bản mà còn trực tiếp thực thi mã. Bài viết phân tích các công nghệ sandbox như microVM, gVisor và WebAssembly, cùng những nền tảng phổ biến được xây dựng trên chúng.