Docker 29.8.2: the DNS answer that turns off TLS for your registry
CVE-2026-92543 lets a forged DNS answer strip TLS from registry pulls. How it works, who is exposed, and what to do besides upgrading.
Archive
53 articles on software, infrastructure, security and AI,newest first. Filter by topic or search inside the list.
CVE-2026-92543 lets a forged DNS answer strip TLS from registry pulls. How it works, who is exposed, and what to do besides upgrading.
Atlas's managed MCP server and MongoDB 9.0 landed weeks apart. What each governs, where the gaps are, and how to give an agent read access that stays read-only.
Express 5 is the default install and Express 4 is heading for end of life. What changed, the upgrades that break quietly, and when to switch frameworks.
Why a one-document chat history loses and duplicates turns under concurrency and retries, and a message-per-document design that doesn't.
Why standard async patterns fail for AI and how task queues solve the cascade failures, context loss, and token waste problem
Node.js 26 made Temporal API default, ending the experimental phase of JavaScript's modern date handling. This breaking change affects millions of applications
Stop blocking Node's event loop with worker_threads – a practical guide. Learn how to use worker threads correctly, avoid common pitfalls like ArrayBuffer copyi
The 'node:' prefix prevents typosquatting attacks when importing core modules. Learn why this security improvement matters and how to migrate your code.
How to use the Jev System One model for fast, structured decisions in AI agents without tying to a specific framework.