2026-07-24
GitOps
Kubernetes
DevOps
FluxCD vs ArgoCD: What Actually Separates Them
Both FluxCD and ArgoCD are CNCF-graduated GitOps tools for Kubernetes. Both watch a Git repository and reconcile your cluster to match it. Both are mature, well-supported, and running production workloads...
2026-07-21
ssrf
bug-bounty
vector-databases
Private Network Reconnaissance via SSRF in Weaviate Cloud
Summary
2026-05-09
cve
apache-camel
jms
CVE-2026-40453: How I Found an Incomplete Fix in Apache Camel's JMS Header Filtering
The fix for CVE-2025-27636 only patched HTTP components. I found the same case-variant header injection still worked via JMS — leading to remote code execution.
2026-04-10
cve
flux
kubernetes
CVE-2026-40109 — Flux GCR Receiver JWT Audience and Email Bypass
TL;DR
2026-03-14
DevSecOps
Security
CI/CD
Are You Defending Your Code at the Right Stage?
Most teams defend their code at the wrong stage - too late, too noisy, too reactive. Here's how Shift Left and Shift Right together give you complete coverage across every...