Browse by topic
Deployment
What has to change when software runs somewhere other people can reach: hosted and internet-exposed MCP servers, and checking whether running containers still carry vulnerable code or certificate authorities they should no longer trust.
5 posts
-
6 min read
Kunci CA eMudhra Ternyata Cuma Satu Byte. Container Kamu Masih Percaya?
Kunci intermediate CA eMudhra ternyata cuma satu byte. Browser memblokirnya dalam hitungan jam, tapi trust store container kamu belum tentu. Audit 15 menit.
- Security Engineering
- Deployment
-
6 min read
PHP2Shell: The Patch Is Out. Is It Running in Your Containers?
PHP2Shell patches for CVE-2026-109618 and CVE-2026-109619 are out. Five checks to prove the fix is running in your containers, not just released.
- Security Engineering
- Deployment
-
6 min read
The eMudhra CA Keys Were One Byte Long. Does Your Container Still Trust Them?
Eight eMudhra CA keys were one-byte numbers. Browsers blocked them in hours, but containers may not. A 15-minute trust store audit for Docker, Python, Java.
- Security Engineering
- Deployment
-
3 min read
200,000 exposed MCP servers later, the boring checks still win
Roughly 200,000 vulnerable MCP servers are exposed, mostly through basic config mistakes. Here are five quick checks to run on your own MCP server today.
- MCP Security
- Deployment
-
3 min read
What Actually Changes When an MCP Server Leaves Your Laptop
Moving an MCP server behind a gateway: per-request auth, tenant isolation, request-bound approvals and structured logs, plus a lab with 13 runtime tests.
- MCP Security
- Deployment