Matthias Knäpper

@knaepp.bsky.social

21 Followers 13 Following

Runtime Enforcement, Not Runtime Advice
Agentic AI Needs Guardrails, Not Guesswork
Coding Agent Horror Stories: The Agent That Deleted Production
IBM WebSphere Application Server is affected by a cross-site request forgery vulnerability (CVE-2026-8408)
IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability due to Eclipse Parsson (CVE-2026-9563)
Your Laptop Is the New Production Environment
Automating IBM Storage FlashSystem Tasks with REST APIs, PowerShell, Scripting, and Ansible
Why AI Agents Need Isolation
What Does EU AI Act Compliance Require?
IBM FlashCore Module (FCM) Product Guide: Evolution of IBM FlashCore Technology and FCM5 Enhancements
IBM WebSphere Application Server is affected by a remote code execution vulnerability (CVE-2026-9319)
Docker Content Trust: Retirement and Migration Guidance
PH71556:IBM WebSphere Application Server is affected by server-side request forgery (CVE-2026-9006)
IBM WebSphere Application Server is affected by server-side request forgery (CVE-2026-9006)
PH71370:IBM WebSphere Application Server is affected by multiple vulnerabilities (CVE-2026-8646, CVE-2026-9320, CVE-2026-9071)
PH71631:IBM WebSphere Liberty is affected by multiple vulnerabilities (CVE-2026-8646, CVE-2026-9320, CVE-2026-9071)
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when using the Web Server Plug-ins (CVE-2026-9072, CVE-2026-8858, CVE-2026-10852)
IBM HTTP Server latest cumulative security interim fix
PH71342,PH71376:MULTIPLE VULNERABILITIES IN THE WEBSPHERE WEBSERVER PLUG-IN
WebSphere Application Server Liberty 26.0.0.6
WebSphere Application Server traditional Version 9.0.5.28
Evolution of IBM FlashCore Technology and FCM5 Enhancements
Cyber Resiliency and Scanning with IBM Storage Sentinel powered by Index Engines CyberSense
Docker joins the Athena coalition: a cross-industry collaboration for supply chain security
PH70847: UPDATE API DISCOVERY DEPENDENCIES
PH71590:IBM WEBSPHERE APPLICATION SERVER IS VULNERABLE TO IDENTITY SPOOFING (CVE-2026-8644)
SANITIZE CONTEXTID PARAMETER IN RELIABLE MESSAGING COMPONENT
THE AUTHENTICATION CALL IS TRIGGERING TOKEN VALIDATION MULTIPLE TIMES AND THROWING MULTIPLE EXCEPTIONS.
Base64 module in jython includes " " and "/" character irrespective of defined alternate characters.
PH70821: SENSITIVE INFORMATION IN FFDC
Docker Hardened Images enhanced vulnerability scanning with Docker and Aikido
PH69349: JAVA.LANG.NULLPOINTEREXCEPTION IN TPVNAVTREE.JSP
5 Software Supply Chain Security Best Practices for Development Teams
Addressing processing of archives with negative offsets in Tarfile Jython Module
PLUGIN-CFG.XML FILE GENERATED WITH THE GenPluginCfg.sh COMMAND FAIL DUE TO ASM JAR FILENAME CHANGE
IBM Redbooks | Context Without Limits: A High-Performance KV Cache Platform for Large-Scale AI Inference
What is AI Governance? Frameworks, Principles, and Best Practices
PH71453:IBM WEBSPHERE APPLICATION SERVER IS AFFECTED BY REMOTE CODE EXECUTION (CVE-2026-9311, CVE-2026-9330)
PH71422:IBM WEBSPHERE APPLICATION SERVER IS VULNERABLE TO IDENTITY SPOOFING (CVE-2026-8644)
Update poplib module in bundled jython
"Classes" link in "Class loader viewer" causes console log out due to missing CSRF ID in request.
What is Software Supply Chain Security?
Hardened Images Explained: Fewer CVEs, Smaller Attack Surface
How to Secure AI Agents: A Practical Overview for Development Teams
WASPREUPGRADE FAILS WITH BUNDLE COULD NOT BE RESOLVED. RELATED TO DERBY JAR VERSION
REPEATED SSL0232W THAT OCCURS UNEXPECTEDLY AND REQUIRES A RESTART TO CLEAR
IBM WebSphere Application Server is affected by an identity spoofing vulnerability (CVE-2026-8644)
IBM WebSphere Application Server is affected by remote code execution (CVE-2026-9311, CVE-2026-9330)
What is Sandbox Security?
Coding Agent Horror Stories: The rm -rf ~/ Incident
PH70740: APPLICATION STARTUP FAILS WITH ILLEGALARGUMENTEXCEPTION.
PH70248: UPDATE ZLIB TO 1.3.2
APPLICATION STARTUP FAILS WITH ILLEGALARGUMENTEXCEPTION.
HCL Domino Momentum at Engage 2026: Product Management Highlights
Mitigating CVE-2026-31431 (“Copy Fail”) in Docker Engine
WebSphere Application Server and IBM HTTP Server Security Bulletin List
PH71342:MULTIPLE VULNERABILITIES IN THE WEBSPHERE WEBSERVER PLUG-IN (CVE-2026-8633,CVE-2026-8620)
BUTTON DOES NOT RESPOND IN MAP USERS/GROUPS TO ROLE PANEL
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when using when using Web Server Plug-ins (CVE-2026-8633, CVE-2026-8620)
The Untrusted Autonomous Workload: How AI Coding Agents Reshape What Isolation Has to Do