Morteza
Bahmani

Older Posts

• North Korea’s $11M Crypto Job Interview Scheme: How Remote Hiring Became an Attack Vector Sep 23, 2026

  Seven U.S. intelligence agencies tied a $11M cryptocurrency theft to North Korean recruitment fraud. Fake job interviews, credential harvesting, and cryptocurrency payment traps targeting IT professio…

• Agents Aren’t Chatbots: Why Distributed Systems Matter Sep 22, 2026

  AI agents make API calls, manage state, and fail under load. Treat them like distributed systems, not chatbots. Backoff, idempotency, and structured traces aren't optional.

• Signed Installers and the macOS Infostealer Myth Sep 21, 2026

  Fake Zoom and Slack installers are delivering the Sonoma stealer to Macs. Code signing blocks tampering, not deception. Verify the artifact before you run it.

• cua: Computer-Use Automation at Scale Sep 21, 2026

  An open-source framework for cross-OS computer-use agents with built-in benchmarks and fleet infrastructure — protocol-first, evaluation-native, fleet-aware.

• The Myth of Universal VPN Security Sep 20, 2026

  Common belief that any VPN provides equal protection ignores implementation differences, transparency, and real-world effectiveness. Reality shows VPNs hide IP and encrypt traffic but offer no true an…

• Sandboxing Autonomous AI Coding Agents: Ephemeral Containers and Egress Boundary Enforcement Sep 19, 2026

  Infrastructure security engineer Alex Chen discusses container sandboxing, system call filtering with seccomp and Landlock, and network egress boundaries for autonomous AI coding agents.