Vikrant
A KVM guest escape that runs code on your hypervisor
Zapscape is a guest-to-host escape for KVM on x86. It lets a compromised VM run code on the host machine, which is the nightmare scenario for cloud providers.
Read post
security
20 posts tagged.
- kvm
-
securityVikrant
LLM-generated CVE reports are polluting security databases
Someone is flooding the National Vulnerability Database with fake SQLite vulnerabilities written by language models, and it is breaking actual security work.
Read post
-
1 August 2026
Three models are better than one
Why my intrusion detection capstone needed an Isolation Forest, a Random Forest and an autoencoder to reach 0.95 F1 on real attack traffic.
Read post
-
llmVikrant
LLM code review found 41 security issues for three thousand dollars
A security firm ran Claude through GlobaLeaks' codebase and found medium-severity bugs for seventy-six dollars per finding. The question is whether a human would have caught the same issues faster.
Read post
-
securityVikrant
OpenAI published their Codex security playbook
OpenAI open-sourced the internal security guidelines they used when building Codex. Turns out threat modelling an AI code generator is different from threat modelling a database.
Read post
-
githubVikrant
The GitHub security team responded to a critical vulnerability by closing the ticket
OrchidFiles reported a flaw that let anyone read private repo secrets. GitHub marked it duplicate, did not patch it, then banned the researcher.
Read post
-
encryptionVikrant
The going dark argument is still wrong after 15 years
Law enforcement claimed strong encryption would end investigations. A new paper tracks what actually happened: encryption went mainstream, crime still gets solved.
Read post
-
llmVikrant
Kimi K3 fixed 15 CVEs that other models would not touch
A Chinese LLM patched critical security bugs in a codebase where OpenAI's models and Anthropic's Claude refused to engage. The refusal problem is real.
Read post
-
qubes-osVikrant
Qubes OS has a public CVE list now and it is shorter than you think
Fifteen years of a compartmentalised desktop OS, zero remote code execution bugs. The paper tracking every public Qubes vulnerability is out.
Read post
-
llmVikrant
LLMs that remember you are creepy and useful in equal measure
Gwern argues personalised LLM assistants could filter spam, draft replies, and catch your mistakes before you send them. The privacy trade-off is obvious.
Read post
-
securityVikrant
The MCP security audit no one asked for but everyone needs
Anthropic's Model Context Protocol promised to standardise how AI agents talk to tools. A new audit shows most implementations ship with auth disabled by default.
Read post
-
amdVikrant
AMD removed memory encryption from consumer Ryzen CPUs and nobody noticed
A firmware update silently killed Transparent Memory Encryption on consumer chips. The engineers stopped replying when users asked why.
Read post
-
securityVikrant
Ten thousand fake GitHub repos hosting trojans
Someone found 10,000 GitHub repositories distributing malware disguised as cracked software and game cheats. The scale is wild.
Read post
-
linuxVikrant
1,500 poisoned packages in the Arch User Repository
The Arch Linux team spent the weekend cleaning up more than 1,500 malware-laden packages from the AUR. The scale is what surprised me.
Read post
-
linuxVikrant
400 AUR packages compromised, or why I stopped trusting build scripts
The Arch User Repository just had 400 packages backdoored. The attack vector was not clever. It was obvious, predictable, and it worked anyway.
Read post
-
supply-chainVikrant
Config files that execute code are everywhere
YAML, TOML, and JSON parsers can run arbitrary code during deserialization. Most dependency scanners miss them entirely.
Read post
-
securityVikrant
End-to-end encrypted home cameras without the cloud tax
Someone finally built a home security camera system that encrypts on-device and costs nothing per month.
Read post
-
supply-chainVikrant
Composer is getting package signing after 14 years
PHP's dependency manager is rolling out cryptographic signatures. The timing matters more than the tech.
Read post
-
linuxVikrant
AI bug hunters are spamming the Linux security list into chaos
Linus Torvalds says automated vulnerability scanners have turned the kernel security mailing list into noise. The tools work, the signal-to-noise ratio does not.
Read post
-
securityVikrant
An AI agent found a real vulnerability in curl
Mythos, an autonomous security agent, caught a buffer overflow in curl that human auditors missed. The tooling works.
Read post