IronWorm: A Self-Propagating npm Worm Built to Steal Machine Identities
·1142 words·6 mins
A practitioner breakdown of the npm worm that sweeps environment variables on install and republishes itself through Trusted Publishing.
DevSecOps
When the AI Forgets What It Knows: Memory Poisoning in Claude Code
·1498 words·8 mins
Cisco compromised Claude Code’s persistent memory to deliver insecure guidance across projects, sessions, and reboots. What engineering teams should do.
File Integrity Monitoring for Docker & Kubernetes: A Complete PCI-DSS Guide
·4441 words·21 mins
A complete guide to container FIM for PCI DSS: Docker, Kubernetes, Falco, and cloud-native patterns that survive ephemeral workloads.