LOGIQ Technology Blog: Security

LOGIQ's technology blog shares expertise and the latest trends on Linux, OpenJDK, and virtualization technologies.
It provides practical insights to guide migration projects and platform optimization.

AllAIInfrastructureSecurityEnterpriseBusinessGeopoliticsCrypto
Malicious AGENTS.md and CLAUDE.md files: how a Downloads folder can hijack AI coding agents

Malicious AGENTS.md and CLAUDE.md files: how a Downloads folder can hijack AI coding agents

A planted instruction file in Downloads tried to make an AI coding agent install npm malware. What happened, what the research showed, and how to defend.

Read more
Node2Shell (CVE-2026-111497): which systems are at risk, and what to do now

Node2Shell (CVE-2026-111497): which systems are at risk, and what to do now

Which systems CVE-2026-111497 in Brotli really exposes, how urgent each case is, and the steps to patch, rebuild, restart and mitigate now.

28/10/2026

Responding to Tailworm: hardening our Tailscale network without breaking production

Responding to Tailworm: hardening our Tailscale network without breaking production

How we checked our Tailscale network against the Tailworm findings, removed the Tailscale SSH exposure and kept every production job running.

27/10/2026

HTTP2Shell (CVE-2026-111497): updating a binary does not patch running processes

HTTP2Shell (CVE-2026-111497): updating a binary does not patch running processes

The Brotli flaw behind HTTP2Shell reaches Node.js, Bun and Python. How to find real exposure in live processes and restart AI agents safely.

26/10/2026

eMudhra CA compromise: how to check and fix your Java truststores

eMudhra CA compromise: how to check and fix your Java truststores

Eight eMudhra CA keys are compromised. Browsers block them, but many Java runtimes still trust them. How to check your JDKs and fix them.

23/10/2026