Author

Alex Kim

Threat intelligence editor

Focuses on cloud identity, incident response, and exploitation trends.

CloudIncident responseIdentity

Coverage by Alex Kim (121)

ThreatFrontier poster showing Trivy CVE-2026-33634 supply chain compromise in CI/CD pipelines

How to Build an LLM Evaluation Harness That Catches Real Regressions

Public benchmarks only shortlist a model; your own cases decide whether to ship it. Here is the dataset, the scorers and the CI gates that catch real drift.

A developer's desk lit by a monitor running a terminal AI coding assistant next to a desktop PC with a glowing GPU, illustrating AI models running locally and offline.

Chatgpt Alternative Research

Replacing ChatGPT With a Self-Hosted Stack: What Actually Works in 2026

A hosted assistant is a product, not a model. Here is which of its workloads open weights already match, which they still do not, and what control buys you.

FIPS 140-2 sunset infographic detailing the September 21, 2026 transition to Historical status, procurement blocks, and FIPS 140-3 requirements.

Fips 140 2 Sunset Research

FIPS 140-2 Sunset September 2026: The Migration Guide to FIPS 140-3

Prepare for the September 2026 FIPS 140-2 sunset. Learn the procurement impacts, technical breaking changes, and exact steps to migrate stacks to FIPS 140-3.

Architecture flow diagram of EU Cyber Resilience Act Article 14 showing PSIRT notifications routing through the ENISA Single Reporting Platform to national CSIRTs within 24-hour and 72-hour statutory deadlines.

Cyber Resilience Act Research

EU Cyber Resilience Act Article 14: Navigating Mandatory Vulnerability Reporting Requirements for Enterprise PSIRTs

Explore the EU Cyber Resilience Act Article 14 mandatory 24-hour vulnerability reporting rules, ENISA platform architecture, and PSIRT compliance steps.

Architecture diagram illustrating the multi-stage attack flow from unauthenticated CosmicSting XXE file access through crypt.key exfiltration to StyleSmuggler CSS skimmer injection.

Cosmicsting Research

Beyond the Patch: Evicting CosmicSting (CVE-2024-34102) Backdoors and StyleSmuggler Skimmers in Magento and Adobe Commerce

Learn how to detect and evict CosmicSting (CVE-2024-34102) backdoors and StyleSmuggler CSS skimmers in Magento and Adobe Commerce beyond basic vendor patching.

Cybersecurity dossier diagram illustrating the GitLab unauthenticated arbitrary file read vulnerability, detailing path traversal exploitation, key exfiltration from gitlab-secrets.json, and the impact of forged administrative session tokens.

Gitlab Vulnerability Research

GitLab Unauthenticated Arbitrary File Read Exposes Critical Secrets: Full Blast Radius and Incident Recovery Runbook

Critical GitLab arbitrary file read flaw leaks server secrets. Learn how to hunt logs, stop admin session forgery, and execute an incident recovery runbook.

Threat dossier infographic summarizing CVE-2026-20131 exploitation in Cisco Secure FMC by Interlock ransomware, showing CVSS 10.0 severity, affected releases 7.2 through 7.7, and pivot risks.

Interlock Ransomware Research

Interlock Ransomware Weaponizes Critical Cisco FMC Flaw: Why Standard Patching Fails

Interlock ransomware targets Cisco FMC flaw CVE-2026-20131 to breach networks. Discover why standard patching fails and how to audit and remove backdoors.

Technical architecture diagram of a hardened DeepSeek harness runtime showing the reasoning engine, context manager, rootless Docker sandbox boundary, and security controls mitigating CVE-2026-82533.

Deepseek Harness Research

Hardening DeepSeek Harness: Architecture, Setup Tutorial, and Runtime Security

Deploying DeepSeek-R1 agent runtimes? Learn how to harden the harness architecture, configure local inference, mitigate CVEs, and enforce sandbox security.

Desks covered

Operations Research

Latest

Sep 12, 2026, 12:37 PM EDT · Research · Mlx12 minMLX vs llama.cpp on Apple Silicon: Which Local LLM Runtime to Actually Use

One is a portable inference engine, the other an array framework that also trains — and that single difference settles almost every practical question.

Sep 12, 2026, 12:37 PM EDT · Operations · Llm Evaluation14 minHow to Build an LLM Evaluation Harness That Catches Real Regressions

Public benchmarks only shortlist a model; your own cases decide whether to ship it. Here is the dataset, the scorers and the CI gates that catch real drift.

Sep 12, 2026, 12:37 PM EDT · Research · Prompt Caching11 minPrompt Caching Explained: Cutting Agent Costs Without Touching the Model

Your agent re-sends the same long prefix on every step and pays to recompute it. Here is the KV mechanism, the ordering rule it forces, and the break-even math.

Sep 12, 2026, 12:37 PM EDT · Research · Speculative Decoding11 minSpeculative Decoding and Multi-Token Prediction: How LLMs Generate Faster

Decode is memory-bound, so checking several tokens in one pass is nearly free. Here is the mechanism, the arithmetic behind it, and why quality never moves.