The trinity of ‘developer experience + security standards + operational efficiency’ is greater than the sum of its parts. We call it ‘ergonomic cybersecurity’.
Cambridge, England
Joined August 2019
- Tweets195
- Following0
- Followers71
- Likes16
For agent sandboxes needing domain-based #egress filtering on outbound traffic «without» TLS termination, #DiscrimiNAT OTF offers policy discovery, and SNI spoofing prevention. DNS spoofing and abuse of shared IPs on CDNs won't work thru it. Search in cloud console: DiscrimiNAT
Meet the team at @fwdcloudsec to see how we can secure your outbound network traffic - even if agents or otherwise tinker with DNS resolution to achieve intermittent #egress like they did in HF - OAI incident.
Come, meet the team and talk about outbound traffic filtering and breaking the lethal trifecta in case you're running AI agents. Live, interactive demo, socks and stickers too obviously.
Come grab a pair! We've gone all in on socks this year for @fwdcloudsec EU 2026 🧦
Various sizes of ethically made, high quality socks, produced by the excellent people at @Stand4Socks
Every sock has a sister pair that has been donated to a rough sleeper.
Come grab some free socks & stickers from us at @fwdcloudsec EU London 2026.
The team are hard at work preparing the stall, fiddling with electronics 👨🔬 and trying the socks on for size 🧦
Three variations on subversive use of DNS by the Agent are documented in Hugging Face's technical writeup of the July 2026 security incident involving OpenAI models. In this article, @new23d discusses what each of these three types of DNS workarounds...
chasersystems.com/blog/the-c…
v2.50 of DiscrimiNAT OTF now released on GCP. OTF* means Outbound Traffic Filtering.
This version brings StartTLS SMTP support, and default rules, for #egress filtering on the cloud.
*See MITRE D3FEND D3-OTF
Release notes: chasersystems.com/docs/discr…
v2.50 of DiscrimiNAT OTF now released on AWS. OTF* means Outbound Traffic Filtering.
This version brings StartTLS SMTP support, and default rules, for #egress filtering on the cloud.
*See MITRE D3FEND D3-OTF
Release notes: chasersystems.com/docs/discr…
Happy to reassure our users that the #egress evasion TTPs used by the Agent in the OpenAI & HuggingFace incident have long been mitigated in #DiscrimiNAT OTF (outbound traffic filtering). In fact in our demo, we show these attacks being caught. #2 is SNI spoofing, btw
huggingface.co/blog/agent-in…
We were just assigned a /29 #IPv6 block by RIPE. We now have 633,825,300,114,114,700,748,351,602,688 IPv6 addresses.
inet6num: 2a05:6340::/29
netname: UK-CHASERSYSTEMS-20260518
country: GB
org: ORG-CSL88-RIPE
admin-c: AA44781-RIPE
apps.db.ripe.net/db-web-ui/l…
DiscrimiNAT Firewall v2.40 shipped yesterday on GCP and day before on AWS. It has Canonical-supplied mitigations applied for Copy.Fail. It is also hardened to the CIS standard and therefore the exploits for Dirty Frag fail to work on it. We are monitoring the situation and will push an update if needed.
Is Post-Quantum Cryptography #PQC being used by your apps when calling other APIs?
New feature in the works that'll let you capture your progress with updating the crypto libs
#DiscrimiNAT is an #egress filter for your cloud with monitoring, analytics, dry-run & enforcement
Another fantastic review of our DiscrimiNAT Firewall. If you need a developer-friendly #egress filtering solution for AWS or GCP, book a demo here: chasersystems.com/
Link to review: g2.com/products/discriminat-…
Chaser Systems retweeted
I was mighty upset with Google on 12 Feb. We had discovered that the issue affecting egress filtering for a DiscrimiNAT customer on GCP was in fact Post-Quantum Cryptography TLS handshakes. It was a combination of the most up-to-date OpenSSL version in a container image and ...
v2.30 of DiscrimiNAT Firewall for egress filtering is now Generally Available.
Key improvements include support for Post-Quantum Cryptography #PQC TLS handshake.
AWS release notes: chasersystems.com/docs/discr…
GCP release notes: chasersystems.com/docs/discr…
