Security teardowns of real misconfigurations and their fixes, and Blueprint explainers that describe an architecture in plain English.https://zulusec.com/en-ushttps://zulusec.com/blog/agent-operations-platform-reference-architecture/https://zulusec.com/blog/agent-operations-platform-reference-architecture/What becomes possible when the boundary comes first: a person asks for work in plain words, an agent does it in a machine that exists only for that session, everything it touches belongs to somebody, and the record shows what happened. The five planes, two worked flows, and where to start.Wed, 02 Sep 2026 00:00:00 GMTai agentsreference architecturesandboxingfirecrackercontainmenthttps://zulusec.com/blog/ambient-authority-webassembly/https://zulusec.com/blog/ambient-authority-webassembly/Every containment control is a fence built around a runtime that defaults to yes. WebAssembly inverts that, but it does not remove the problem so much as force it into writing, and the places it leaks are worth knowing before you bet an architecture on it.Sat, 22 Aug 2026 00:00:00 GMTwebassemblyrustcapability securityarchitecturecontainmenthttps://zulusec.com/blog/ai-agent-sandboxes-explained/https://zulusec.com/blog/ai-agent-sandboxes-explained/Everyone is putting agents in sandboxes. Most of the machinery being written about today will be obsolete in two years. Here are the properties that will not be, and a public harness that tells you whether your sandbox enforces them.Sun, 16 Aug 2026 00:00:00 GMTai agentssandboxingzero trustarchitecturecontainmenthttps://zulusec.com/blog/kubernetes-anonymous-cluster-takeover/https://zulusec.com/blog/kubernetes-anonymous-cluster-takeover/Bind a powerful role to the anonymous identity and any request with no credentials can read every secret and run any workload. Here is the attack, the fix, and the one command that tells you where your own cluster stands.Sun, 16 Aug 2026 00:00:00 GMTKubernetesRBACcloud securityDevSecOpshttps://zulusec.com/blog/prompt-injection-agent-workflows/https://zulusec.com/blog/prompt-injection-agent-workflows/An AI agent has no boundary between the instructions you gave it and the text it reads. Anything it reads can try to become an instruction. Here is the model in plain English, why filtering does not fix it, and the gates that actually hold.Sat, 15 Aug 2026 00:00:00 GMTprompt injectionai agentsautomationarchitecturehttps://zulusec.com/blog/public-s3-bucket-customer-data/https://zulusec.com/blog/public-s3-bucket-customer-data/S3 buckets are private by default, so a public one is a wrong setting left on by accident. Here is how anyone downloads the data, how to find every public bucket you own, and the one setting that stops it.Sat, 15 Aug 2026 00:00:00 GMTAWSS3data exposurecloud securityhttps://zulusec.com/blog/deleted-aws-key-git-history/https://zulusec.com/blog/deleted-aws-key-git-history/Deleting a leaked AWS key from your code does not remove it. Here is how attackers find keys in git history, what one key exposes, and the three fixes that actually work.Fri, 14 Aug 2026 00:00:00 GMTAWSsecretsDevSecOpscloud securityhttps://zulusec.com/blog/zero-trust-architecture-explained/https://zulusec.com/blog/zero-trust-architecture-explained/Zero trust is not a product you buy. It is one idea: stop trusting the network, and check every request instead. Here is the whole model in one diagram, in plain English, and where to actually start.Fri, 14 Aug 2026 00:00:00 GMTzero trustarchitectureidentitynetwork security