Kguardian, a new open-source Kubernetes security tool, generates least-privilege NetworkPolicy, CiliumNetworkPolicy, and seccomp profiles from eBPF traces of pod traffic and syscalls rather than hand-…
A developer has proposed a "Forum-Driven AI Engine" that models an AI workspace on a technical forum thread, where the original post body acts as a virtual screen that is fully erased and rewritten on…
Justin Grimm published a reference implementation for a 64-byte L1D cache-resident frame that compresses a 128-node consensus vote bitmask to 26 bytes using balanced ternary (3^5 = 243 ≤ 256), letting…
A new arXiv survey (2609.13731v1) synthesizes 206 foundational studies and regulatory standards into a systems-security reference framework for trustworthy agentic AI, formalizing the general agent ar…
AgentGuard, an Apache-2.0 Linux eBPF LSM supervisor for coding agents, launched at version 0.1.2 as an early prototype that enforces security policy at the kernel level rather than inside the agent. T…
Cisco has been named a Leader in The Forrester Wave™: Microsegmentation Solutions, Q3 2026, with its Cisco Secure Workload receiving the highest possible scores in policy administration, on-premises n…
A wave of agent infrastructure releases on the same day signals that reasoning models are now a commodity, with the focus shifting to the layer underneath agents: observability, security, and context …
VirgilFlow, a Python and eBPF-based infrastructure defense tool, fixed a critical performance bug that caused up to 28% telemetry trace drops under high load. The team used Google AI Studio with Gemin…
Dan Finneran of Isovalent, now part of Cisco, presented a talk on using eBPF to observe and control AI agents and APIs, highlighting the growing disconnect between AI-generated code and human understa…
MITRE released a Framework for Continuous Remote Attestation in July 2026, developed with Fr0ntierX and Invary, to address the risk of eBPF layer tampering that can feed corrupted telemetry to AI syst…
CortexBrain, an open-source monitoring platform for distributed cloud and hybrid cloud-edge workflows, integrates eBPF to provide kernel-level insights and network observability without sidecar overhe…
Brendan Gregg, a performance engineer at Netflix, reports that multiple AI agents have been created using his published work, including 'AI Brendan' helper agents that interpret flame graphs and eBPF …
Groundcover, an observability vendor founded in 2021, announced a $100 million Series C round this week, led by the shift from traditional monitoring to AI infrastructure as agentic AI systems integra…
EBPF is useful for observing and sandboxing AI agents because it attaches to the kernel to monitor syscalls—file, process, and network activity—without modifying the agent, according to a technical an…
A Hacker News user asked whether anyone has figured out how to guard large language models (LLMs) at the kernel level, and another user responded that it can be done at the OS kernel level using eBPF …
Tigera's Calico Enterprise platform now supports VMs and containers on Kubernetes with a unified networking and security model, enabling enterprises to migrate VMs to Kubernetes without renumbering IP…
The SchedCP framework, detailed in a paper from arXiv (2509.01245), achieves up to 1.79x speedup and 13x lower search cost for Linux scheduler tuning by using a controlled optimization loop that separ…
Kubernetes network policies based on IP addresses become insecure when pods are rescheduled, as IPs change. SPIFFE and SPIRE provide cryptographic workload identities, and Cilium enforces mutual TLS u…
The InstaTunnel engineering team developed an eBPF-based socket steering solution to preserve QUIC connection migration across load-balanced worker processes. By teaching the kernel to route packets b…
HookProbe, an open-source, AI-native edge IDS/IPS, relies on eBPF maps for high-speed packet processing on low-cost hardware like the Raspberry Pi. The project explains common eBPF map creation failur…