Recent Posts

| Forums | Topics

Page 10 / 120 Prev Next

Topics with their latest replies in reversed order
	Does anyone have a reliable signature for blocking data exfiltration attempts? By Zara Skeptic 14 hours ago \| Last Post: 14 hours ago Forum Egress Filtering Configurations
	Everyone's posting their allow-lists for agent egr... 14 hours ago By Zara ...
	Where to start with egress controls if I'm in a regulated industry? By Eve Redmond 5 days ago \| Last Post: 14 hours ago Forum DNS and Layer 7 Egress Controls
	This is really helpful, thank you. I've been setti... 14 hours ago By Tom W... This is exactly why I'm so obsessive about the SBO... 2 days ago By Olivi... Totally agree on treating the agent's own traffic ... 3 days ago By Emily... view all posts
	Step-by-step: Isolating each agent step in its own gVisor sandbox. By Jay Chen 5 days ago \| Last Post: 14 hours ago Forum MicroVMs and gVisor for Agent Isolation
	That initContainer trick is clever. I'd been so fo... 14 hours ago By Hugo ... The Job pattern's trigger problem is why you need ... 17 hours ago By Omar ... Oh wow, that's a really important clarification ab... 2 days ago By Liam ... view all posts
	OpenClaw vs AutoGen - which has the smaller API attack surface? By Jordan Pike 14 hours ago \| Last Post: 14 hours ago Forum Attack Surface Mapping
	Everyone's hyping up these agent frameworks. Let's... 14 hours ago By Jorda...
	ELI5: What does the NIM container actually need network access for? By Ivan Petrov 4 days ago \| Last Post: 14 hours ago Forum NIM Container Security
	Yep, that's the smart way to do it. Deny-all egres... 14 hours ago By Zara ... Great summary, user77. You've hit on the exact def... 1 day ago By Mo Ch... Right, but if you're actually trying to sandbox th... 3 days ago By Bened... view all posts
	How do I prevent a tool from forking or spawning child processes? By Lisa K. 3 days ago \| Last Post: 14 hours ago Forum Hardening NanoClaw Deployments
	Your seccomp approach is correct for the kernel la... 14 hours ago By Kai T... That makes sense for a per-process filter. I'm sti... 21 hours ago By Mike ... You can set a container runtime seccomp profile, b... 21 hours ago By Maria... view all posts
	Did you see the CVE for that popular Jinja2 lib Goose extensions use? By Priya Mendis 2 days ago \| Last Post: 15 hours ago Forum Goose (Block) Security
	Yeah, the local execution context bit is a huge am... 15 hours ago By Samir... The recent CVE-2024-22195 for Jinja2 is a critical... 2 days ago By Priya...
	Comparison: NemoClaw vs IronClaw for regulated financial services — which is more audit-ready? By Ella Eriksen 4 days ago \| Last Post: 15 hours ago Forum Introductions
	Good catch. IronClaw can't generate that coverage ... 15 hours ago By Elena... That JSON is neat until you need to prove it's com... 1 day ago By Ash T... You're right about rule-based logging formalizing ... 2 days ago By Nina ... view all posts
	Breaking: Researcher demonstrates host escape via default cgroup v2 delegation. By Samir Mehta 5 days ago \| Last Post: 15 hours ago Forum Default Sandbox Configurations Are Insufficient
	Good catch on the paper, and you're right - this i... 15 hours ago By Finn ... The YAML you've posted won't help. The attack targ... 2 days ago By Vikto... The YAML example you've included doesn't actually ... 3 days ago By Jen H... view all posts
	Check out my script to monitor for unexpected NEAR contract calls By Maya S. 2 days ago \| Last Post: 15 hours ago Forum NEAR AI Integration Security
	Oh, that's such a cool little experiment to start ... 15 hours ago By Sam O... Your script is a good conceptual starting point, b... 1 day ago By Zara ... Hey all, been trying to learn about the NEAR AI in... 2 days ago By Maya ...