🧰 eBPF

The items that name it 16

• CVE-2026-98432: Linux TCP Use-After-Free Risk and Patch Validation
  articleas classification.technologies2026-10-30
• Post-Quantum Stateless Steganography & MTU Bounds: Bridging P2P Censorship Resistance to Quantum Networks
  paperas classification.technologies2026-10-17
• Static SCA vs. Dynamic SCA: Which is Better (and Why It's Neither) | Blog | Endor Labs
  articleas tools2026-10-12It is written here as eBPF (Extended Berkeley Packet Filter; traces Linux applications via the kernel without restarting or directly instrumenting the application, used for dynamic SCA runtime monitoring).

  Extended Berkeley Packet Filter; traces Linux applications via the kernel without restarting or directly instrumenting the application, used for dynamic SCA runtime monitoring

• Randomness-Anchored Runtime Discovery of Cryptographic Operations on Linux Using eBPF
  paperas tools2026-10-05It is written here as eBPF (user-space probes).

  used to build a runtime cryptographic discovery system that detects classical and post-quantum cryptographic operations as they execute on Linux

• SMTP is the key: BPFDoor and AVERAT hitting the network edge
  writeupas classification.technologies2026-10-02
• ICYMI: August 2026 @AWS Security
  articleas classification.technologies2026-09-23
• archcanary
  repoas affected products2026-08-21

  abused for rootkit persistence hiding processes, files, socket inodes

• manyuegong33/r0crawl_skills
  repoas tools2026-08-06

  系统级可观测性追踪

• jscrambler npm package publishes malicious preinstall binary
  writeupas classification.technologies2026-07-12
• 400+ AUR Packages Hijacked: What the “Atomic Arch” Campaign Means for Supply-Chain Security
  writeupas classification.technologies2026-06-18
• Kubernetes Runtime Security : The Guide
  articleas classification.technologies2026-06-07
• cicd-sensor: eBPF Runtime Security for CI/CD Pipelines
  repoas classification.technologies2026-06-04
• Panic at the Distro
  writeupas tools2026-05-14

  Framework for safely hooking into various parts of the kernel to dynamically load and enforce custom security policies

• Cross-Platform Unity in EDR
  articleas tools2026-01-13It is written here as eBPF (extended Berkeley Packet Filter).

  Used by Huntress Linux EDR to hook into the Linux kernel for performant, privileged collection of process telemetry, process lineage, and execution context

• Security in the LLM Age - Greg Kroah-Hartman
  videoas technologies
• AWS EKS forensics: data sources and investigation tooling (Synacktiv)
  articleas classification.technologies