34 posts in this category
Two critical flaws in the PHP engine, disclosed on 21 October 2026, allow unauthenticated remote code execution and memory disclosure on almost every PHP version since 5.4. In this advisory we look at what is affected, how to patch, and what an enforced AppArmor profile stops until every workload is patched.
We are introducing a fully sovereign managed bifrost. You get the same product and the same ease of use, with all data processed on a Swedish-owned cloud, outside US jurisdiction. We start onboarding the first users this summer and scale further in the fall.
Fragnesia (CVE-2026-46300) is the third universal Linux kernel LPE in the Dirty Frag class to land in under two weeks. It abuses the XFRM ESP-in-TCP path to write into the page cache of read-only files with no race condition, and ships with a one-line public exploit. For workloads running under a behaviour-generated AppArmor profile, the surface it needs was never in the allow list. This is the same non-event, a third time. Here's why, and how to confirm your exposure in seconds.
Where a runtime-driven security platform fits the CRA's essential requirements, vulnerability handling obligations, and reporting timeline. Annex I, Article 13, and Article 14 walked clause by clause.
Dirty Frag is a universal Linux kernel LPE that chains two CVEs, CVE-2026-43284 and CVE-2026-43500, explicitly designed to bypass the Copy Fail mitigation. For workloads running under a behaviour-generated AppArmor profile, neither variant's required surface was ever in the allow list. Here's why, and how to confirm your exposure in seconds.
Copy Fail (CVE-2026-31431) is a Linux kernel LPE that's already in CISA KEV and reaches every container that inherits the AF_ALG kernel surface by default. For workloads running under a behaviour-generated AppArmor profile, the exploit's required syscall path was never allowed in the first place. Here's why, and how to confirm your exposure in seconds.
The EU’s NIS2 Directive is reshaping cybersecurity expectations for digital infrastructure and SaaS providers. While traditional tools overwhelm teams with...
The Cyber Resilience Act (CRA) is the EU’s new baseline for secure-by-design software and hardware. Any product with digital elements sold in the EU — from...
**When your container runtime is the target** RunC sits at the heart of nearly every container platform, from Docker and containerd to Kubernetes nodes. This...
Alerts are pouring in. Your team’s stretched. And the critical signal is buried in noise.Bifrost flips the model: we understand each service’s legit runtime...
Here’s how your company can cut costs without compromising on security by using bifrost:⚙️Automate manual processes⚠️Prevent costly breaches️Protect the...
The EU’s NIS2 Directive is raising the bar for cybersecurity across Europe. From digital infrastructure to SaaS platforms, companies now face strict...
AppArmor is a mandatory access control (MAC) Security Module that restricts the capabilities and permissions of a containerised workload. The permissions are...
Let’s break down how bifrost supports key roles in modern software teams and how each can benefit from smarter, automated security!...
Are you confident that every dependency in your codebase is secure? That quick-fix plugin four years ago that somehow became permanent? As the usage of...
We know there’s plenty of security tools out there. But bifrost is built to do more than just alert you. It protects you automatically, from testing to...
Security should work with you, not against you. With bifrost, you can integrate in seconds, gain insights in minutes, and secure every release, all without...
AI-generated code is quickly becoming a central part of modern software development. These AI agents can write, test, and deploy code with minimal human input,...
As the summer winds down and routines pick up again, it’s time to dive into the second half of the year. Here at bifrost we're recharged and ready to help you...
The Cyber Resilience Act (CRA) is a new EU regulation that works to improve cybersecurity by establishing standards for products with digital elements sold...
Stop firefighting security threats and focus on what matters, building and shipping innovative products. bifrost automates security, empowering developers,...
As financial services become increasingly tech-driven, the risks associated with digital systems also grow. Cyberattacks, system failures, and data breaches...
bifrost integrates in seconds, learns in minutes, and protects at your next release. Just four lines of annotations, that’s all it takes to enable bifrost. No...
Shipping fast is a non-negotiable, but every new service, dependency, and release widens the attack surface. Security is supposed to be integrated, but most...
We’re committed to building a safer Kubernetes ecosystem, where runtime security is proactive, continuous, and automated, not an afterthought. It’s a vision we...
**For DevOps ⚙️** We get it, DevOps is all about speed, reliability, and efficiency. But security? It often feels like an afterthought. Traditional security...
In software management, visibility is significant for understanding and improving performance. Bifrost offers insights into your software’s behaviour, providing...
bifrost’s service leverages AppArmor, a Linux Security Module, to protect applications. But how does AppArmor work to protect your software? Let’s take a...
Streamlining setup and simplifying access management of software services can significantly reduce the administration of many development teams. Our service is...
Kubernetes providers make life easier for developers everywhere, especially for those of us wanting to use Kubernetes without the hassle of creating and...
Many organisations find it challenging to effectively protect their containerised applications in a world of complex cloud security. bifrost is designed with...
As the new year begins, we’re thrilled to be back in the office to see what 2025 has in store. At bifrost security, our mission is clear: help DevOps teams...
Kubernetes providers make life easier for developers everywhere, especially for those of us wanting to use Kubernetes without the hassle of creating and...
The growing landscape of cloud computing has revolutionised the way modern applications are built. Bringing a wave of agility, automation, and innovation....