CortexBrain, an open-source monitoring platform for distributed cloud and hybrid cloud-edge workflows, integrates eBPF to provide kernel-level insights and network observability without sidecar overhe…
Brendan Gregg, a performance engineer at Netflix, reports that multiple AI agents have been created using his published work, including 'AI Brendan' helper agents that interpret flame graphs and eBPF …
Groundcover, an observability vendor founded in 2021, announced a $100 million Series C round this week, led by the shift from traditional monitoring to AI infrastructure as agentic AI systems integra…
EBPF is useful for observing and sandboxing AI agents because it attaches to the kernel to monitor syscalls—file, process, and network activity—without modifying the agent, according to a technical an…
A Hacker News user asked whether anyone has figured out how to guard large language models (LLMs) at the kernel level, and another user responded that it can be done at the OS kernel level using eBPF …
Tigera's Calico Enterprise platform now supports VMs and containers on Kubernetes with a unified networking and security model, enabling enterprises to migrate VMs to Kubernetes without renumbering IP…
The SchedCP framework, detailed in a paper from arXiv (2509.01245), achieves up to 1.79x speedup and 13x lower search cost for Linux scheduler tuning by using a controlled optimization loop that separ…
Kubernetes network policies based on IP addresses become insecure when pods are rescheduled, as IPs change. SPIFFE and SPIRE provide cryptographic workload identities, and Cilium enforces mutual TLS u…
The InstaTunnel engineering team developed an eBPF-based socket steering solution to preserve QUIC connection migration across load-balanced worker processes. By teaching the kernel to route packets b…
HookProbe, an open-source, AI-native edge IDS/IPS, relies on eBPF maps for high-speed packet processing on low-cost hardware like the Raspberry Pi. The project explains common eBPF map creation failur…
A developer created an eBPF-based tool called sqlite-trace to log SQLite queries from any binary, after a GitHub issue revealed OpenAI's Codex was writing 640TB of logs per year to SQLite. The tool wo…
A developer demonstrates how eBPF can be used for observability in AI-generated services, providing a practical guide with Go and C. The article argues that eBPF is the future of observability due to …
Researchers introduced ActPlane, a programmable OS-level policy enforcement engine for AI agent harnesses that enforces safety and effectiveness policies in the OS kernel using eBPF. ActPlane improves…
A developer used eBPF with Go to debug a production issue in an AI-generated service where P95 latency spiked from 40ms to 4 seconds due to excessive kernel-level file I/O calls invisible to tradition…
Tigera announced Lynx, a unified control plane for Kubernetes-native AI agents, to address security challenges posed by autonomous, non-deterministic AI agents. Lynx authenticates, authorizes, mediate…
A malicious PyPI package named 'ColorLib' was discovered targeting developers with info-stealing malware that exfiltrates environment variables, cryptocurrency wallet details, and credentials. OWASP r…
A solo developer spent over three years building Ray Hosting, a topology-aware game server orchestrator from scratch. The system uses CPU cache alignment, eBPF/XDP-based DDoS protection, and live cont…
A developer outlines how to build a low-cost home Security Operations Center (SOC) using open-source tools and edge-first principles, leveraging efficient ARM processors and surplus enterprise gear. T…
Zeroserve, a new zero-configuration HTTPS server, serves entire websites from a single tarball over HTTP/2 and TLS 1.3 while allowing users to script request handling with eBPF programs that run as sa…
A GPU training pipeline at a major AI company breached its SLA despite showing 97% GPU utilization across all monitoring tools (Datadog, Grafana, nvidia-smi). Using eBPF kernel tracing, an SRE identif…