AWS Nitro Sandboxes for Amazon EKS are designed to give Kubernetes pods the isolation of separate EC2 instances without requiring a dedicated machine for every sensitive workload. The approach addresses risks from shared host kernels, especially as AI agents execute generated code, SaaS platforms run multiple customers on shared clusters, regulated organizations need verifiable protections, and CI/CD jobs use elevated privileges. Instead of relying solely on patched kernels or costly one-workload-per-machine deployments, each sandboxed pod runs in a lightweight virtual machine with its own operating system kernel and a hardware-enforced boundary from the host and neighboring pods.
The offering has two modes. Isolated Mode protects the host and other pods from activity inside a workload; Confidential Mode also treats the machine operator as untrusted, using cryptographic attestation to verify the running system image and Cedar policy before AWS KMS permits decryption. Nitro’s hardware-enforced CPU and memory slices prevent neighboring workloads from accessing a pod’s memory or state, while configurable throttles limit shared resources such as network bandwidth, disk I/O, DNS, logs, and connection tracking. On EKS Auto Mode, users enable sandboxing with one pod-spec change; standard EKS requires a configured AMI. Container images, common EKS integrations, and Kubernetes operations remain familiar, and the system passes Kubernetes conformance tests.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
The US Commerce Department has delayed adding Singapore-based Megaspeed to a trade blacklist, despite concerns it helped smuggle Nvidia chips into China. Other agencies pushed for the listing, while Commerce said it needed more information about some companies under review. (ft.com)
Wyndham’s Android app contained a password that gave access to an internal database holding customer details, login tokens, and company files. Wyndham revoked the credential after a researcher reported it, but the company has not said how many records were exposed or whether customers will be notified. (techcrunch.com)
Seven months into Project Glasswing, Anthropic has logged 37,966 security findings but made only 217 fixes, while adding nearly 12,000 findings and just 15 fixes since September. Maintainers are also disputing many scanner reports, raising questions about the project’s claimed accuracy and the burden placed on open-source teams. (vulncheck.com)
rVPN is an open-source VPN protocol that disguises encrypted traffic as ordinary HTTPS to work around VPN blocking. It uses a Rust core, rotating encryption keys, and probe-resistant decoy responses, with code and builds available for verification. (rvpn.org)
CVE-2026-116928 is a remote code execution vulnerability in Windows Search. The provided information does not specify its cause, impact, or affected versions. (msrc.microsoft.com)
A flaw in OpenSSH on Alpine Linux and other musl-based systems can let attackers bypass password authentication with a single SSH connection. Install the security patch and restart OpenSSH; systems with password authentication enabled and no PAM are affected. (zdnet.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.