Tech – Trackr.Live

§ Tag

Kerberoasting detection in 2026: the 4769 signals that hold up, AES downgrade tells, and clearing service-account account noin week one

Encryption-type detancy deton Kerberos TGS requests still catches lazy roasting, but as RC4 gets disabled the durable signal moves to behavior. What to grep for, why the AES downgrade tell degrades, and how to kill service-account false positives before they bury the SOC.

When netstat Lies: Detecting eBPF Magic-Packet Backdoors on Linux

A clean netstat is not proof of safety: eBPF backdoors like LinkPro keep an internal listener, rewrite ports through XDP/TC, and can make bpftool lie about themselves. The durable signal is the bpf() syscall at load time, and on Cilium-heavy fleets, telling real loaders from noise is most of the work.

Artificial Intelligence

Two Ways to Go Vertical: Stanford’s Monolithic 3D Chip and Huawei’s LogicFolding

Stanford fabricated and measured a memory-on-logic 3D chip in a US foundry; Huawei announced a logic-folding design method and a new scaling law with no independent audit yet. Same wall, opposite evidence bars.

Drift detection on image-mode RHEL: what bootc actually changes for defenders

Image-mode RHEL moves the host into an ostree-backed, container-built world. The threat model shifts up the stack, and most detection content built for traditional EL hosts quietly stops working.

Image-mode Linux and bootc: the hardening you stop doing, and the hardening you have to start

Image-mode RHEL and bootc move /usr to a read-only ostree commit and turn host updates into container pulls. That fixes one class of problem and creates a different one for defenders. Here is what actually changes on disk, what to detect, and where the model breaks.

Hardening Immutable Linux: sysext, confext, and the Persistence Surface in 2026

Immutable base images plus systemd sysext/confext overlays have quietly become the standard for fleet-managed Linux in 2026. They also created a persistence surface most SOCs are not yet watching.

Artificial Intelligence

MCP Security: The New Attack Surface Hiding in Your Agentic AI Stack

The Model Context Protocol went from niche spec to ubiquitous integration layer in eighteen months. The threat model did not keep pace. A look at what is actually exposed, and how it maps to NIST SP 800-53.

NewTech

Apple Smart Glasses

Technical Deep Dive: Apple’s AI-Infused Smart Glasses Targeting a 2026 Launch Reports from multiple sources indicate that Apple is advancing plans to release consumer-grade smart glasses, with a target launch timeframe positioned towards the end of 2026. This initiative appears to be a significant component of Apple’s broader strategy to integrate more deeply into the …