cd ~/tags/security

security

2026-04-05

Breaking Isolation Boundaries: VM Escapes, Container Breakouts, and Sandbox Escapes

A deep technical analysis of 2025's most dangerous attack pattern — isolation boundary escapes. From vsock VM escapes to UNIX socket sandbox bypasses, understanding how attackers break out of…

14 min read

containers linux kernel security Virtualization Sandbox VM Escape Exploitation

2026-02-23

Seccomp-BPF: Confining Linux Processes at the Syscall Boundary

A deep dive into Linux seccomp-BPF — building syscall sandboxes from raw BPF filters to production-grade policies, with practical C examples and analysis of how Chrome, Docker, and systemd use…

23 min read

containers linux kernel security Seccomp BPF Sandboxing Syscalls Hardening

2026-02-21

eBPF for Security Monitoring: Kernel-Level Visibility Without the Overhead

A deep dive into using eBPF to build high-performance, kernel-level security monitoring tools — covering syscall tracing, network inspection, and intrusion detection with practical Python examples.

12 min read

linux kernel security eBPF Observability BCC Intrusion Detection Syscall Tracing

2025-10-25

Writing a Memory Allocator from Scratch: glibc Heap Internals and Security Hardening

Every call to malloc hides a small miracle of systems engineering. In the time it takes your program to allocate 16 bytes, glibc’s heap allocator has consulted a multi-tiered bin system, potentially…

15 min read

linux security Systems Programming C Memory Management Low-Level

2019-09-20

'What is Zip Slip?'

Zip Slip was a vulnerability found in the file extraction mechanism employed in programming languages. It was discovered and responsibly disclosed by the Snyk Security team ahead of a public…

2 min read

exploit security vulnerability