DevSecOps · Supply chain · FreelanceN 51.22° · E 6.77° — Düsseldorf
DevSecOps.No bullshit.
Consulting, training and software development for German mid-market companies — for 23 years. I take supply-chain attacks apart in public, before they reach your stack.
Why Renovate Never Updated Our Own Packages — A Trace432 CVEs an einem Tag: Was die Linux-Kernel-CVE-Flut wirklich bedeutetMCP wird stateless: Sessions weichen expliziten State-HandlesI Converted a Kubernetes Cluster to Dual-Stack So git Could Go IPv6-Only — Then AWS Said NoBad Epoll (CVE-2026-46242): A Use-After-Free in epoll Turns Any Local User into Root — on Linux and AndroidClassic McEliece becomes an ISO standard: a 1978 cryptosystem gets a global norm for post-quantum encryptionHollowByte: how an 11-byte packet bloats OpenSSL server memory — no CVE, but patched in 4.0.1/3.6.3/3.5.7/3.4.6/3.0.21SharePoint CVE-2026-58644: deserialization enables unauthenticated RCE — now in the CISA KEV, patched since Jul 14Kimi K3: Moonshot AI Releases the Largest Open-Weight Language Model Yet — Priced Like Sonnet, Real-World Fit Still UnprovenLiteLLM CVE-2026-47101, -47102, -40217: From a Low-Privilege User to proxy_admin and RCE — a Three-Bug Chain in the AI GatewayCode as an OCI artifact: shipping TYPO3 without baking the app code into the imageAsyncAPI npm compromise: a “pwn request” via pull_request_target smuggles a Miasma botnet into generator & specs
What I do for you.
01–03Taken apart before it hits you.
Threat-Feed23.07.2026→21.07.2026→21.07.2026→21.07.2026→
Why Renovate Never Updated Our Own Packages — A Trace
432 CVEs an einem Tag: Was die Linux-Kernel-CVE-Flut wirklich bedeutet
MCP wird stateless: Sessions weichen expliziten State-Handles
I Converted a Kubernetes Cluster to Dual-Stack So git Could Go IPv6-Only — Then AWS Said No
Who's behind this
![[Translate to English:] Foto von Kai Ole Hartwig.](/fileadmin/_processed_/e/9/csm_ole-neu_73323ad80d.jpeg)
Kai Ole Hartwig
Freelance DevSecOps consultant · OnlyOle Consulting
Programming since 2002 – self-taught, set up my own business with KO-Web in 2012. Over 100 projects, with a focus on security, performance, automation and quality. Today freelance: DevSecOps consulting, training and software development.
ContactSounds like a fit?
Book a call
Sounds like a fit?
Then write to me.
No form marathon, no sales funnel. A short message — I get back to you personally and tell you honestly whether I can help.