Open Source

How We Used FalkorDB to Make a Security Alert Explain Itself

Our entry for Graph Hacks by WeMakeDevs × FalkorDB The problem: an alert with no context A security analyst might see hundreds of alerts a day. One…

A response to claims about flatpak being insecure

Your Voice Agent Is Not Working Until the Business Outcome Is Proven

A Voice Agent Is Not Working Until the Business Outcome Is Proven Most voice-agent dashboards answer the easiest questions: Was the call connected?…

How I Used FalkorDB to Trace Software Security Risks in Warden

You’re right—you want the article body , based on the actual README. Use the title separately, then paste everything under Post content into Dev.to.…

One Password Shut Down a US Fuel Pipeline

In May 2021, Americans were filling plastic bags with gasoline. Panic buying. Lines wrapped around the block. A regional state of emergency declared…

Data Sovereignty and Open Architecture in Government Platforms: Design Principles

Designing digital platforms for the State comes with a constraint that barely exists in the private sector: today's technical decisions shape the so…

Email Verification Logs Need a Privacy Contract

Email verification is usually discussed as a delivery problem: did the message arrive, did the link work, and did the user finish signup? In product…

How I Built a Strict SOC2 Compliance Gate in Jira using Atlassian Forge & KVS

If you've ever gone through a SOC2 audit, you know the drill. Auditors want proof that every piece of code deployed to production went through a pee…

Your MCP Hub Exposes Every Tool to Every Agent. That's the Bug.

We stood up an internal MCP hub last quarter. It aggregated four services behind one endpoint, listed every tool in a single catalog, and let any co…

Your Firewall Already Saw the Attack: Bringing AI Detection to Network Logs

Endpoint agents are good at seeing what happens on a machine. But a lot of an attack happens between machines: the scan that finds an exposed servic…

Browser Extensions: The Backdoor Nobody's Reviewing

Browser extensions run inside the trusted browser session, after MFA has passed, after the VPN check has cleared, and after your EDR has already dec…

We Built FFlake at Graph Hacks, and Graphs Made More Sense Than We Expected

By the FFlake team | FalkorDB Graph Hacks 2026 Honestly, building a project during a hackathon is a different experience when the clock is actually…

A secure NestJS + Prisma API starter, piece by piece

Most NestJS tutorials stop at nest new and a controller. The part that takes time is everything that wraps the controllers: security headers, a CORS…

Continuous Security Testing for Small Teams: What to Test, How Often, and Who Owns It

Small teams rarely have a security department. They have a few developers, maybe a team lead, and sometimes an MSP that looks after the infrastructu…

Spoofing WiFi MAC Addresses with a Windows Kernel Driver

1. What a MAC address is A MAC address is six bytes. Convention writes them as hex pairs separated by colons: A4:5E:60:C3:1B:07 The first three byte…

The bug is in the arrangement: finding and cutting your AI agent's data-leak paths

Give an agent three ordinary tools: one that reads a GitHub issue, one that reads a local folder, one that can post a GitHub comment. Each behaves e…

BlastShield AI: an evidence-first incident commander built on FalkorDB

The safest cloud response starts with a path, not a prompt BlastShield AI: an evidence-first incident commander built on FalkorDB When a cloud incid…

Zero Trust, explained without the buzzwords

"Zero Trust" might be the most abused phrase in security. Every vendor slaps it on a box and charges you extra for it. Let me strip the marketing of…

How to Isolate Contract Evidence by Tenant: Retrieval Checks That Survive Review

Short answer: make tenant scope a signed, server-derived capability that every retrieval stage consumes, then prove isolation with adversarial tests…

LLM access controls and monitoring: where the control belongs in the request path

Access control for LLM applications is usually discussed as a model problem. It is not. It is a request path problem. The model proposes an action,…

Stratum - AI Security Triage Agent (Graph Based)

Stratum: the agent that finds the route, closes it, and proves it By Jayanth A. Nandeesh · Graph Hacks: Context for AI Agents · Track 1, Agents That…

I Built a Remote to Answer Claude Code From My Phone

Hello there! If you run Claude Code or Codex for real work, you know the moment. You start a task, it runs for a while, and you go make a coffee. Wh…

Cross-Site Request Forgery (CSRF): When a Trusted Browser Becomes an Attack Tool

Imagine logging into your banking application, then visiting a malicious website in another browser tab. Without your knowledge, that website trigge…

Prowler has HIPAA checks. What checklist-based compliance still misses.

✓ Human-authored analysis; AI used for formatting and proofreading. The 2018 conversation In Prowler issue #227 , a user asked: "any plan to add [HI…

Why Our AI Desktop Assistant Never Stores Model API Keys on Your Computer

Originally published on cernalo.com . Provider keys stay on the server. The desktop app sends a session and the context you choose, and the service…

Fix the Vaultwarden "HTTPS Required" Secure Context Error

If you start Vaultwarden with a plain docker run -p 8000:80 and open it from another machine, you don't get a login page. You get this: You are not…

Designing AI Governance as a System Architecture

By Jewel Darlington, Chief AI Governance Officer & Founder, Solutions by Jewel An enterprise AI agent receives approval to update a configuratio…

Testing an AI Refund Workflow: Allow, Deny, Modify, and Escalate

A support agent handling a refund might need to look up a customer, submit an amount, and explain why the refund is appropriate. Each step raises a…

Privacy Budgets for Test Email in Web Apps

Email is often treated as harmless test plumbing. In a web application, it is closer to a small data store: messages can contain personal-looking ad…

Threat Prevention Signatures and CVE-2026-0322: What limited Coverage Requires

Threat Prevention Signatures and CVE-2026-0322: What limited Coverage Requires Palo Alto Networks provides Threat Prevention coverage for CVE-2026-0…