Docker homelab pitfalls: disk space, logs, and config drift
A developer shares critical lessons from managing a Docker homelab, covering image cleanup risks, unbounded log growth, and configuration persistence issues.
News for teams that run their own software
A daily digest on self-hosting, DevOps, security, document AI and HR tech. Each story is summarized, explains why it matters and links to the original publisher.
Claude builds knowledge graphs without a local LLM server
Chaos Cypher introduces an MCP server that lets Claude Code extract and validate knowledge graphs using only client-side models, removing the need for GPU-heavy local servers.
Carbonato botnet uses AI agents to hijack exposed Docker hosts
The Carbonato botnet targets unauthenticated Docker daemons to deploy Hermes AI agents, enabling automated credential theft and lateral movement via Telegram.
SlopTotal brings self-hosted AI text detection to local CPUs
A new open-source tool runs 23 AI detectors locally, offering transparent scoring for text and websites without sending data to third parties.
WAIaaS brings 684 tests to self-hosted AI wallet infrastructure
The open-source WAIaaS project offers a Docker-based, policy-driven wallet service for AI agents with extensive test coverage and local execution.
Placeholder domains and active Citrix exploits highlight supply chain risks
Attackers registered a common documentation placeholder to serve malware, while Citrix patches urgent flaws under active exploitation. These incidents reveal hidden risks in self-hosted infrastructure
Local GraphRAG setup with Ollama and Chaos Cypher explained
A new tutorial demonstrates how to run a local knowledge graph using Ollama and Chaos Cypher, enabling private document analysis without cloud APIs.
Reducing LLM costs by moving spreadsheet aggregation to the server side
A data engineer reduced token usage by 2,300 times for large spreadsheets by performing calculations on a local server instead of sending raw rows to an AI model.
GitLab email tokens allow code pushes and CI execution without authentication
Aikido Security reveals that leaked GitLab issue email addresses can be used to push code to main branches and run CI jobs, bypassing IP restrictions and two-factor authentication.
CISA adds actively exploited WSO2 and Adobe Commerce flaws to KEV catalog
CISA added two critical vulnerabilities in WSO2 and Adobe Commerce to its Known Exploited Vulnerabilities catalog due to active attacks.
Sifthound offers a self-hosted, drop-in replacement for Tavily search API
GitHub user khsarvar released Sifthound, an open-source alternative to Tavily that runs on your own infrastructure using SearXNG and supports MCP.
Pingularity offers self-hosted internet monitoring with scheduled speed tests
Pingularity is a new self-hosted tool that tracks internet uptime, latency, and scheduled speed tests to help users diagnose connectivity issues.
Roundcube SQL injection flaw actively exploited in the wild
The Canadian Centre for Cyber Security warns that CVE-2026-48842, a pre-authentication SQL injection in Roundcube Webmail, is being actively exploited by attackers.
Vindle optimizes massive CSV imports by replacing PHP with Rust
Vindle reduced processing time for 27 GB of product data by moving CSV filtering from PHP to a custom Rust tool, eliminating redundant parsing passes.
