InfoQ - Security

Presentation: Adopting Memory-Safety and Fine-Grained Compartmentalisation with CHERI

David Chisnall — Wed, 12 Aug 2026 11:00:00 GMT

David Chisnall discusses how the CHERI hardware architecture redefines pointer safety to solve isolation and sharing challenges. He explains how CHERI enables spatial and temporal memory safety for C/C++, scales down to microcontrollers with CHERIoT, and replaces costly OS-level RPC mechanisms with lightweight, auditable compartmentalization - all without requiring massive codebase rewrites.

By David Chisnall

Presentation: Leveraging Adversary Emulation for GenAI Red Teaming

Kennedy Torkura — Mon, 10 Aug 2026 09:32:00 GMT

Kennedy Torkura discusses practical GenAI red teaming techniques to safeguard LLMs and knowledge bases against security threats like data poisoning and LLMjacking on AWS. He explains how engineering leaders and architects can bridge traditional cloud security with MITRE ATLAS frameworks to proactively identify vulnerabilities, implement guardrails, and secure production AI applications.

By Kennedy Torkura

GitHub Hardens npm and Actions Defaults, Drawing Debate over Delays versus Signing

Steef-Jan Wiggers — Sat, 08 Aug 2026 07:45:00 GMT

GitHub consolidated the npm and Actions changes it shipped from March to July 2026 against supply chain attacks, several of which alter defaults rather than add options. Hacker News discussion focused less on the individual controls than on whether waiting periods are the right instrument, or a substitute for author-side package signing.

By Steef-Jan Wiggers

Podcast: WebAssembly on the JVM: Feature Evolution, Performance, and the Transition to Endive

Andrea Peruffo — Mon, 03 Aug 2026 11:00:00 GMT

Andrea Peruffo discusses the evolution of WebAssembly beyond the browser and its growing role on the server-side JVM. He covers performance advancements in Wasm runtimes, moving from interpreters to efficient JIT compilation, and explores real-world production use cases ranging from edge computing platforms to modular plugin architectures.

By Andrea Peruffo