# Thoughts & Stories: Security

> Sharing my experiences, learnings, and adventures in tech and beyond.

URL: https://www.matthewswong.com/en/blog/category/security/

- [Project Glasswing Patch Gap: 6,157 Disclosed, 516 Patched](https://www.matthewswong.com/en/blog/project-glasswing-patching-deficit-open-source/)
- [Cyber Resilience Act Reporting Obligations: A DevOps Runbook](https://www.matthewswong.com/en/blog/eu-cra-reporting-september-2026-devops-runbook/)
- [NIST AI Agent Standards Initiative: What CAISI Covers](https://www.matthewswong.com/en/blog/nist-ai-agent-standards-initiative-caisi/)
- [AIBOM Hugging Face Study: 97,940 Models, Docs Missing](https://www.matthewswong.com/en/blog/aibom-completeness-hugging-face-models-ml-bom/)
- [Pickle Model Scanner Evasion: ShadowPickle and Safetensors](https://www.matthewswong.com/en/blog/shadowpickle-model-scanner-evasion-safetensors/)
- [PP 33/2026 Pelindungan Data Pribadi: A Developer Guide](https://www.matthewswong.com/en/blog/gr-33-2026-pdp-implementing-regulation-developers/)
- [Malicious Agent Skills: ClawHavoc SKILL.md Supply Chain Guide](https://www.matthewswong.com/en/blog/agent-skills-supply-chain-clawhavoc-skill-md/)
- [GitGuardian Secrets Sprawl 2026: AI Agent Commits, MCP Configs](https://www.matthewswong.com/en/blog/gitguardian-secrets-sprawl-2026-ai-agent-commits/)
- [Anthropic Threat Report September 2026: DevOps Lessons](https://www.matthewswong.com/en/blog/anthropic-threat-report-september-2026-agent-attacks/)
- [AI Code Security Report 2026: Veracode Stuck at 56% Pass Rate](https://www.matthewswong.com/en/blog/veracode-2026-genai-code-security-report-pass-rate/)
- [Cursor CVE-2026-22708 RCE: Shell Built-ins Beat the Allowlist](https://www.matthewswong.com/en/blog/cursor-cve-2026-22708-shell-builtins-allowlist-bypass/)
- [Hijacked AI Coding Assistant Session Spread Shai-Hulud Worm](https://www.matthewswong.com/en/blog/hijacked-ai-coding-assistant-session-shai-hulud-100-repos/)
- [npm Worm With Valid SLSA Provenance: The keyv Lesson](https://www.matthewswong.com/en/blog/npm-valid-slsa-provenance-malicious-keyv-worm/)
- [EU AI Act Digital Omnibus Deadlines: A DevOps Team Calendar](https://www.matthewswong.com/en/blog/eu-ai-act-digital-omnibus-devops-deadlines/)
- [Tensorlake npm Shai-Hulud Compromise: Lock Down Install Scripts](https://www.matthewswong.com/en/blog/tensorlake-npm-shai-hulud-ai-sdk-worm/)
- [Slopsquatting in 2026: Package Hallucination Rates, 127 Names](https://www.matthewswong.com/en/blog/slopsquatting-2026-frontier-models-package-hallucination/)
- [Deadbugz MCP Server: Runtime Tool Metadata Poisoning Defence](https://www.matthewswong.com/en/blog/deadbugz-mcp-runtime-metadata-poisoning/)
- [Splunk MCP Server CVE-2026-76404: Patch Triage for MCP Apps](https://www.matthewswong.com/en/blog/splunk-mcp-server-cve-2026-76404-ai-toolkit-advisory/)
- [GitLost: GitHub Agentic Workflows Prompt Injection Defence](https://www.matthewswong.com/en/blog/gitlost-github-agentic-workflows-prompt-injection/)
- [Claude Code and Gemini CLI GitHub Actions Secrets Vulnerability](https://www.matthewswong.com/en/blog/claude-code-gemini-cli-codex-ci-secrets-github-issue/)
- [containerd runAsNonRoot Bypass: CVE-2026-46680 Fix and Audit](https://www.matthewswong.com/en/blog/containerd-cve-2026-46680-runasnonroot-bypass/)
- [Kubernetes 1.36 Security Changes: userns, kubelet, gitRepo](https://www.matthewswong.com/en/blog/kubernetes-1-36-user-namespaces-kubelet-authz-gitrepo-removed/)
- [Kubernetes Manifest-Based Admission Control Beta in 1.37](https://www.matthewswong.com/en/blog/kubernetes-manifest-based-admission-control-beta/)
- [Sentry MCP Prompt Injection: Agentjacking Defence Guide](https://www.matthewswong.com/en/blog/sentry-mcp-agentjacking-prompt-injection-incident-agents/)
- [Pulumi Neo Security: Read-Only Scans, Fixes Only as a PR](https://www.matthewswong.com/en/blog/pulumi-neo-security-read-only-assessment-proposed-diff/)
- [AI Coding Agent Sandbox: Fixing Approval Fatigue in CI](https://www.matthewswong.com/en/blog/anthropic-how-we-contain-claude-sandbox-approval-fatigue/)
- [Enterprise MCP Reference Architecture with Cloudflare Portals](https://www.matthewswong.com/en/blog/cloudflare-enterprise-mcp-reference-architecture-portals/)
- [MCP Write Controls: Cloudflare WriteGuard vs Approval Prompts](https://www.matthewswong.com/en/blog/cloudflare-writeguard-mcp-write-controls/)
- [Shadow MCP Detection with Cloudflare Gateway Policy](https://www.matthewswong.com/en/blog/cloudflare-shadow-mcp-detection-gateway-policy/)
- [GitHub Agentic Workflows Study: The Prompt Injection Gap](https://www.matthewswong.com/en/blog/gh-aw-empirical-study-prompt-injection-gap/)
- [Hugging Face Security Incident 2026: Treat Datasets as Code](https://www.matthewswong.com/en/blog/hugging-face-july-2026-incident-dataset-pipeline-lessons/)
- [Transformers trust_remote_code Vulnerability: CVE-2026-4372](https://www.matthewswong.com/en/blog/transformers-cve-2026-4372-trust-remote-code-bypass/)
- [LiteLLM CVE-2026-42208: SQL Injection Fix and Gateway Hardening](https://www.matthewswong.com/en/blog/litellm-cve-2026-42208-sql-injection-hardening/)
- [LiteLLM Supply Chain Attack: PyPI Dependency Cooldowns](https://www.matthewswong.com/en/blog/litellm-pypi-supply-chain-attack-dependency-cooldowns/)
- [OpenSSF Model Signing: Sign and Verify ML Models With OMS](https://www.matthewswong.com/en/blog/openssf-model-signing-oms-sign-verify-ml-models/)
- [AI Agent Least Privilege: Credentials, Tokens and Secrets](https://www.matthewswong.com/en/blog/ai-agent-least-privilege-credentials/)
- [Red Teaming AI Agents With Promptfoo: A Practical Guide](https://www.matthewswong.com/en/blog/red-teaming-ai-agents-promptfoo/)
- [AI Agent Identity: Delegated Authorization Beyond OAuth 2.1](https://www.matthewswong.com/en/blog/ai-agent-identity-delegated-authorization/)
- [PaaS Environment Secrets: Build-Time vs Runtime Injection](https://www.matthewswong.com/en/blog/paas-environment-secrets-management-teams/)
- [UU PDP Compliance Checklist for AI Features in Indonesia](https://www.matthewswong.com/en/blog/uu-pdp-ai-feature-compliance-checklist/)
- [Claude Code Plugin Security: Audit Before You Install](https://www.matthewswong.com/en/blog/claude-code-plugin-supply-chain-security/)
- [Claude Code Authentication: Every Login Method Explained](https://www.matthewswong.com/en/blog/claude-code-authentication-login-methods/)
- [Claude Code Managed Settings: Policy That Actually Holds](https://www.matthewswong.com/en/blog/claude-code-managed-settings-enterprise-policy/)
- [Claude Code Security Model: Layers, Trust and Limits](https://www.matthewswong.com/en/blog/claude-code-security-model-layers/)
- [Claude Code Zero Data Retention: What You Give Up](https://www.matthewswong.com/en/blog/claude-code-zero-data-retention-compliance/)
- [Claude Code Auto Mode: Tune the Permission Classifier](https://www.matthewswong.com/en/blog/claude-code-auto-mode-permission-classifier/)
- [Claude Code Permission Modes: Autonomy vs Safety](https://www.matthewswong.com/en/blog/claude-code-permission-modes-guide/)
- [Claude Code Sandboxing: Run Bash Safely](https://www.matthewswong.com/en/blog/claude-code-sandboxing-bash-guide/)
- [MCP Server Security Checklist for Developers](https://www.matthewswong.com/en/blog/mcp-server-security-checklist/)
- [Prompt Injection Attacks on AI Coding Agents](https://www.matthewswong.com/en/blog/prompt-injection-ai-coding-agents/)
- [Sandboxing AI Agents and the Lethal Trifecta](https://www.matthewswong.com/en/blog/sandboxing-ai-agents-lethal-trifecta/)
- [OAuth 2.1 vs OAuth 2.0: What Changed and How to Migrate](https://www.matthewswong.com/en/blog/oauth-2-1-vs-2-0-migration/)
- [Content Security Policy in Next.js: Nonces & strict-dynamic](https://www.matthewswong.com/en/blog/content-security-policy-nextjs-nonce/)
- [OpenFGA ReBAC: Fine-Grained Multi-Tenant Authorization](https://www.matthewswong.com/en/blog/openfga-rebac-multi-tenant-authorization/)
- [Building e-KYC for Indonesian Fintech: NIK/Dukcapil Verification Done Right](https://www.matthewswong.com/en/blog/nik-ktp-dukcapil-verification-api-indonesia/)
- [Expose Self-Hosted Services Safely with Cloudflare Tunnel](https://www.matthewswong.com/en/blog/cloudflare-tunnel-zero-trust-homelab/)
- [eBPF Observability with Cilium Tetragon on Kubernetes](https://www.matthewswong.com/en/blog/ebpf-observability-cilium-tetragon/)
- [Hardening Linux Services with systemd Sandboxing](https://www.matthewswong.com/en/blog/systemd-hardening-sandboxing-services/)
- [The IDOR That Let One Branch Read Another Branch's Revenue](https://www.matthewswong.com/en/blog/branchid-scoping-idor-multi-branch-erp/)
- [Passkeys in Next.js: Passwordless Auth with WebAuthn](https://www.matthewswong.com/en/blog/passkeys-webauthn-nextjs-authentication/)
- [Software Supply Chain Security: SBOMs and Sigstore](https://www.matthewswong.com/en/blog/software-supply-chain-sbom-sigstore/)
- [Automated Secrets Rotation: A Strategy That Survives Audits](https://www.matthewswong.com/en/blog/automated-secrets-rotation-strategy/)
- [Encrypting Secrets in Git with SOPS and age](https://www.matthewswong.com/en/blog/sops-age-encrypted-secrets-git/)
- [UU PDP No. 27/2022: The Developer's Compliance Guide for Indonesia's Data Protection Law](https://www.matthewswong.com/en/blog/uu-pdp-compliance-developer-guide-indonesia/)
- [Zero Trust Security Architecture for Cloud-Native Applications: A Practical Guide](https://www.matthewswong.com/en/blog/zero-trust-security-architecture-indonesia/)

---

- HTML version: https://www.matthewswong.com/en/blog/category/security/
- Bahasa Indonesia: https://www.matthewswong.com/id/blog/category/security/
- Site index for agents: https://www.matthewswong.com/llms.txt
- Sitemap: https://www.matthewswong.com/sitemap.xml
- API description (OpenAPI): https://www.matthewswong.com/openapi.json