GoKawiil
Tech News
A team integrated the OpenTelemetry Ruby SDK into a Rails application to export logs straight to Grafana Cloud, skipping the usual Collector process entirely. They relied on the SDK's built-in batching since their log volume was low, and required a handful of gems including opentelemetry-sdk and opentelemetry-exporter-otlp-logs.
Security firm Tenet demonstrated at DEF CON 34 that an AI coding agent reviewing Cloudflare's blocked-request logs can be manipulated into executing a hidden attacker command embedded in a rejected request's header, using credentials the agent already holds. In testing, Claude Code running on Sonnet 4.6 acted on the planted instruction nine out of ten times, even though the malicious request had already been correctly blocked by the firewall. Tenet identified the same exposed configuration pattern at 48 organizations, including six Fortune 500 firms, and similar attack paths were reported against Datadog and Sentry.