Dan Finneran of Isovalent, now part of Cisco, presented a talk on using eBPF to observe and control AI agents and APIs, highlighting the growing disconnect between AI-generated code and human understa…
A developer's analysis of cluster-wide service meshes reveals significant operational costs, with traditional Envoy sidecars consuming approximately 70 GB of memory at 1,000 pods and adding 166% laten…
Developer Maneshwar explains how he learned to use Cilium's pwru, an eBPF-powered tool that traces packets through the Linux kernel by instrumenting every function that touches a `sk_buff` struct, dis…
Paperclip Inc. has deployed hybrid post-quantum TLS key exchange (X25519MLKEM768) on its Cilium Gateway API ingress to protect against the harvest-now-decrypt-later threat, using a mutating admission …
Kubernetes network policies based on IP addresses become insecure when pods are rescheduled, as IPs change. SPIFFE and SPIRE provide cryptographic workload identities, and Cilium enforces mutual TLS u…
Microsoft announced at Build 2026 a suite of upgrades to Azure Kubernetes Service (AKS) to optimize it for AI workloads, including AKS on Bare Metal in public preview for direct hardware access, gener…
User-space security agents are structurally flawed because they share the same privilege level as the processes they monitor, allowing attackers with root access to simply kill the agent or erase logs…