Kaylin Trychon
@kaylintrychon.bsky.social
CMO @ Edera | Comms for Aerospace Village | Prev Security Comms Lead Google | Rule Bender l New Englander
Reposted by Kaylin Trychon
as someone who spent 10 years in the Internet of Things, you cannot trust a single "smart" device on the market. The only ones I allow are completely local devices, and even those I am wary of. All I'm saying is, whoever buys a toilet camera is asking to be hacked.
"Kohler can access data and pictures from toilet camera"
It's amazing what passes for a totally normal sentence in 2025
It's amazing what passes for a totally normal sentence in 2025
Kohler Can Access Data and Pictures from Toilet Camera It Describes as “End-to-End Encrypted” - /var/log/simon
Claimed end-to-end privacy doesn’t fully conceal your rear-end data
varlogsimon.leaflet.pub
December 4, 2025 at 12:16 AM
as someone who spent 10 years in the Internet of Things, you cannot trust a single "smart" device on the market. The only ones I allow are completely local devices, and even those I am wary of. All I'm saying is, whoever buys a toilet camera is asking to be hacked.
Reposted by Kaylin Trychon
When your slack thread count is higher than Egyptian cotton
the slack thread for this kernel CVE is 571 replies and it's just Ariadne and I lol
i am watching @alex.zenla.io attempt to use a well-known AI coding bot to fix a kernel CVE for the lolz. i am pretty sure it has added more CVEs, but it sure sounds confident while doing so.
December 4, 2025 at 7:20 PM
When your slack thread count is higher than Egyptian cotton
Reposted by Kaylin Trychon
This was so much fun to talk about! If you want to find out how we found this bug, the raw story is here first, in my own words :)
This episode of #OpenSourceSecurity I chat with @alex.zenla.io from @edera.dev about the #TARmageddon vulnerability they found
I've coordinated a lot of vulnerabilities in my day, but never have I had to even think about something as difficult as this one
I've coordinated a lot of vulnerabilities in my day, but never have I had to even think about something as difficult as this one
TARmageddon with Alex Zenla
Josh discusses the TARmageddon vulnerability with Alex Zenla, CTO of Edera. In this episode, we explore the discovery of the TARmageddon vulnerability. It’s especially interesting because it’s Rust, b...
opensourcesecurity.io
December 1, 2025 at 7:08 PM
This was so much fun to talk about! If you want to find out how we found this bug, the raw story is here first, in my own words :)
Reposted by Kaylin Trychon
Multi-tenancy in k8s promises efficiency, often at the cost of security. Join @denhamparry.co.uk and Amberwolf’s Iain Smart discussing why traditional isolation fails, the risks of shared-kernel environments, and how we deliver secure multi-tenancy without performance tradeoffs.
edera.link/vev4bsky
edera.link/vev4bsky
November 18, 2025 at 2:31 PM
Multi-tenancy in k8s promises efficiency, often at the cost of security. Join @denhamparry.co.uk and Amberwolf’s Iain Smart discussing why traditional isolation fails, the risks of shared-kernel environments, and how we deliver secure multi-tenancy without performance tradeoffs.
edera.link/vev4bsky
edera.link/vev4bsky
Sipping cocktails at the @edera.dev booth (#2041)! If you’re at KubeCrawl stop by, say hi & grab some axolotl swag!
November 11, 2025 at 11:05 PM
Sipping cocktails at the @edera.dev booth (#2041)! If you’re at KubeCrawl stop by, say hi & grab some axolotl swag!
Come say hi to me!!!!
Booth #2041: A Haiku
Booth twenty-forty-one,
Ivy waits with code and cheer
Secure dreams take flight.
Booth twenty-forty-one,
Ivy waits with code and cheer
Secure dreams take flight.
Why Booth #2041 should be a part of your KubeCon plan, a thread. 🧵
November 11, 2025 at 6:35 PM
Come say hi to me!!!!
Reposted by Kaylin Trychon
I’m very excited to announce Sprout, an open-source UEFI bootloader from @edera.dev that can reduce bootloader times to milliseconds, now available to try today!
edera.dev/stories/spro...
edera.dev/stories/spro...
Introducing Sprout, the Rust-Powered, Open Source Bootloader for the Cloud-Native Era
Discover Sprout by Edera — the Rust-built, open-source bootloader delivering sub-second boot speeds, cloud-native simplicity, and memory-safe security.
edera.dev
November 10, 2025 at 12:59 PM
I’m very excited to announce Sprout, an open-source UEFI bootloader from @edera.dev that can reduce bootloader times to milliseconds, now available to try today!
edera.dev/stories/spro...
edera.dev/stories/spro...
Can't wait for this!!!
Night at the Aquarium. November 12. Don't miss it.
Join us and our friends from @thenewstack.io, @tailscale.com, @syntasso.io, Blacksmith, and @minimus.io for an unforgettable evening surrounded by belugas and brilliant people.
Spots are limited. Register here: luma.com/940nj3xh
Join us and our friends from @thenewstack.io, @tailscale.com, @syntasso.io, Blacksmith, and @minimus.io for an unforgettable evening surrounded by belugas and brilliant people.
Spots are limited. Register here: luma.com/940nj3xh
Night at the Aquarium · Luma
Ever wondered what happens when the lights go down at the aquarium? Think Night at the Museum—but with Beluga whales.
Join Blacksmith, Edera, Minimus,…
luma.com
November 7, 2025 at 3:45 PM
Can't wait for this!!!
Reposted by Kaylin Trychon
Kubernetes multi-tenancy sounds great—until a shared kernel turns one breach into many.
Join @denhamparry.co.uk and Iain Smart to see how secure multi-tenancy actually works.
edera.link/vev4bsky
Join @denhamparry.co.uk and Iain Smart to see how secure multi-tenancy actually works.
edera.link/vev4bsky
Runtime Rumble
Multi-Tenant Melee: Achieving Secure Isolation for Modern Container Platforms
Join us on Nov 20 at 5 PM GMT/12 PM EST as Amberwolf's Iain Smart and Edera's Lewis Denham-Parry discuss how to achieve full isolation and efficiency for multi-tenant Kubernetes environments—without c...
edera.link
October 24, 2025 at 2:49 PM
Kubernetes multi-tenancy sounds great—until a shared kernel turns one breach into many.
Join @denhamparry.co.uk and Iain Smart to see how secure multi-tenancy actually works.
edera.link/vev4bsky
Join @denhamparry.co.uk and Iain Smart to see how secure multi-tenancy actually works.
edera.link/vev4bsky
Reposted by Kaylin Trychon
-Clever worm hits the VS Code scene
-F5 was breached via its own devices
-KT CEO to resign after security breach
-Boy Scouts to award cybersecurity merit badges
-Russia looking at age verification, too
-TARmageddon vuln
Podcast: risky.biz/RBNEWS494/
Newsletter: news.risky.biz/risky-bullet...
-F5 was breached via its own devices
-KT CEO to resign after security breach
-Boy Scouts to award cybersecurity merit badges
-Russia looking at age verification, too
-TARmageddon vuln
Podcast: risky.biz/RBNEWS494/
Newsletter: news.risky.biz/risky-bullet...
October 22, 2025 at 9:08 AM
-Clever worm hits the VS Code scene
-F5 was breached via its own devices
-KT CEO to resign after security breach
-Boy Scouts to award cybersecurity merit badges
-Russia looking at age verification, too
-TARmageddon vuln
Podcast: risky.biz/RBNEWS494/
Newsletter: news.risky.biz/risky-bullet...
-F5 was breached via its own devices
-KT CEO to resign after security breach
-Boy Scouts to award cybersecurity merit badges
-Russia looking at age verification, too
-TARmageddon vuln
Podcast: risky.biz/RBNEWS494/
Newsletter: news.risky.biz/risky-bullet...
Reposted by Kaylin Trychon
@edera.dev discovered an serious vuln in various Rust crates for handling tar files edera.dev/stories/tarm...
TARmageddon (CVE-2025-62518): RCE Vulnerability Highlights the Challenges of Open Source Abandonware | Edera Blog
Edera uncovers TARmageddon (CVE-2025-62518), a Rust async-tar RCE flaw exposing the real dangers of open-source abandonware and supply chain security.
edera.dev
October 21, 2025 at 3:32 PM
@edera.dev discovered an serious vuln in various Rust crates for handling tar files edera.dev/stories/tarm...
Reposted by Kaylin Trychon
To build secure, resilient infrastructure, we need to reset the conversation. Namespaces are valuable, but they don’t isolate.
Beyond Namespaces: Why Kubernetes Needs Real Workload Isolation
To build secure, resilient infrastructure, we need to reset the conversation. Namespaces are valuable, but they don’t isolate.
bit.ly
October 21, 2025 at 3:30 PM
To build secure, resilient infrastructure, we need to reset the conversation. Namespaces are valuable, but they don’t isolate.
Reposted by Kaylin Trychon
Things Edera's bsky admin is doing while waiting out the AWS outage 🧵
October 20, 2025 at 5:22 PM
Things Edera's bsky admin is doing while waiting out the AWS outage 🧵
Reposted by Kaylin Trychon
NEW: Security researchers warn that the rise of vibe coding can lead to dangerous insecurities in the software supply chain. @lhn.bsky.social reports www.wired.com/story/vibe-c...
Vibe Coding Is the New Open Source—in the Worst Way Possible
As developers increasingly lean on AI-generated code to build out their software—as they have with open source in the past—they risk introducing critical security failures along the way.
www.wired.com
October 6, 2025 at 1:13 PM
NEW: Security researchers warn that the rise of vibe coding can lead to dangerous insecurities in the software supply chain. @lhn.bsky.social reports www.wired.com/story/vibe-c...
Where my Denver peeps at?!
Are you in the Denver area? The Edera team is there this week and we're holding a little hardened RUN-time. 😉
Join us for a casual 5k, with run or walk groups depending on your preferred speed.
RSVP: luma.com/joajiim7
Join us for a casual 5k, with run or walk groups depending on your preferred speed.
RSVP: luma.com/joajiim7
October 6, 2025 at 4:13 PM
Where my Denver peeps at?!
Reposted by Kaylin Trychon
Happy to have contributed to this article about a topic I’m passionate about!
Vibe coding is happening and it’s here, but we need to be real about what that means. It’s time to treat it seriously, and we need to know and understand the high stakes :)
www.wired.com/story/vibe-c...
Vibe coding is happening and it’s here, but we need to be real about what that means. It’s time to treat it seriously, and we need to know and understand the high stakes :)
www.wired.com/story/vibe-c...
Vibe Coding Is the New Open Source—in the Worst Way Possible
As developers increasingly lean on AI-generated code to build out their software—as they have with open source in the past—they risk introducing critical security failures along the way.
www.wired.com
October 6, 2025 at 1:52 PM
Happy to have contributed to this article about a topic I’m passionate about!
Vibe coding is happening and it’s here, but we need to be real about what that means. It’s time to treat it seriously, and we need to know and understand the high stakes :)
www.wired.com/story/vibe-c...
Vibe coding is happening and it’s here, but we need to be real about what that means. It’s time to treat it seriously, and we need to know and understand the high stakes :)
www.wired.com/story/vibe-c...
Reposted by Kaylin Trychon
NEW: The predominantly English-speaking amorphous hacking group known as Scattered Spider/Lapsus$/etc has launched a website to publicize their victims and extort them.
This is the first time the group has such a public presence, indicating an escalation in their strategy.
This is the first time the group has such a public presence, indicating an escalation in their strategy.
Hacking group claims theft of 1 billion records from Salesforce customer databases | TechCrunch
The hacking group claims to have stolen about a billion records from companies, including FedEx, Qantas, and TransUnion, who store their customer and company data in Salesforce.
techcrunch.com
October 3, 2025 at 3:16 PM
NEW: The predominantly English-speaking amorphous hacking group known as Scattered Spider/Lapsus$/etc has launched a website to publicize their victims and extort them.
This is the first time the group has such a public presence, indicating an escalation in their strategy.
This is the first time the group has such a public presence, indicating an escalation in their strategy.
Reposted by Kaylin Trychon
Happy "It's October 3rd" to those who celebrate!
October 3, 2025 at 3:20 PM
Happy "It's October 3rd" to those who celebrate!
You can't sit with us... unless you're streaming The Life of a Showgirl on October 3rd
a woman in a pink sweater is sitting on a bed and talking to someone .
ALT: a woman in a pink sweater is sitting on a bed and talking to someone .
media.tenor.com
October 3, 2025 at 2:50 PM
You can't sit with us... unless you're streaming The Life of a Showgirl on October 3rd
Reposted by Kaylin Trychon
Denver, let’s put the run in hardened runtime 🏃♂️
Join Edera at Sloan’s Lake on Oct 9, 7:30 AM for a friendly 5k — run or walk, all paces welcome. Stickers, water, bananas, and good company included.
RSVP luma.com/joajiim7
Join Edera at Sloan’s Lake on Oct 9, 7:30 AM for a friendly 5k — run or walk, all paces welcome. Stickers, water, bananas, and good company included.
RSVP luma.com/joajiim7
Hardened RUNtime 5k · Luma
Edera is coming to Denver, and we’d love to kick things off with a little hardened runtime of our own. Join us at Sloan’s Lake on Thursday, October 9th at 7:30…
luma.com
September 30, 2025 at 5:31 PM
Denver, let’s put the run in hardened runtime 🏃♂️
Join Edera at Sloan’s Lake on Oct 9, 7:30 AM for a friendly 5k — run or walk, all paces welcome. Stickers, water, bananas, and good company included.
RSVP luma.com/joajiim7
Join Edera at Sloan’s Lake on Oct 9, 7:30 AM for a friendly 5k — run or walk, all paces welcome. Stickers, water, bananas, and good company included.
RSVP luma.com/joajiim7
Can your software handle a smackdown?
September 15, 2025 at 5:30 PM
Can your software handle a smackdown?
“Security can be effectively built-in from the ground up when properly designed,” comments @edera.dev's @alex.zenla.io on Apple's latest push to eliminate memory safety bugs.
More from @lhn.bsky.social & @wired.com www.wired.com/story/apple-...
More from @lhn.bsky.social & @wired.com www.wired.com/story/apple-...
Apple’s Big Bet to Eliminate the iPhone’s Most Targeted Vulnerabilities
Alongside new iPhones, Apple released a new security architecture on Tuesday: Memory Integrity Enforcement aims to eliminate the most frequently exploited class of iOS bugs.
www.wired.com
September 11, 2025 at 5:17 PM
“Security can be effectively built-in from the ground up when properly designed,” comments @edera.dev's @alex.zenla.io on Apple's latest push to eliminate memory safety bugs.
More from @lhn.bsky.social & @wired.com www.wired.com/story/apple-...
More from @lhn.bsky.social & @wired.com www.wired.com/story/apple-...
Reposted by Kaylin Trychon
Want to learn more about what we're doing? Join our webinar with @denhamparry.co.uk on August 26th: edera.link/vev1bsky
Welcome! You are invited to join a webinar: Edera Everyday: Let The Hardened Runtime Era Begin. After registering, you will receive a confirmation email about joining the webinar.
Detection-heavy tools react too late and overwhelm teams with noise. We're launching the Hardened Runtime category—a prevention-first approach that stops breaches at the infrastructure level.
Join us...
edera.link
August 11, 2025 at 4:54 PM
Want to learn more about what we're doing? Join our webinar with @denhamparry.co.uk on August 26th: edera.link/vev1bsky
Reposted by Kaylin Trychon
Edera Protect just won Innovation of the Year from @cyberscoop.bsky.social.
We're helping to future-proof infrastructure with no tradeoffs—near-native performance, airtight isolation, and zero workflow changes.
We're helping to future-proof infrastructure with no tradeoffs—near-native performance, airtight isolation, and zero workflow changes.
August 11, 2025 at 4:52 PM
Edera Protect just won Innovation of the Year from @cyberscoop.bsky.social.
We're helping to future-proof infrastructure with no tradeoffs—near-native performance, airtight isolation, and zero workflow changes.
We're helping to future-proof infrastructure with no tradeoffs—near-native performance, airtight isolation, and zero workflow changes.
😮💨😮💨😮💨
We’re declaring an end to "move fast and break things."
It’s time for security that actually prevents breaches — not just detects them after the fact.
🛡️ Introducing the Hardened Runtime:
A new category for modern, AI-powered infrastructure security.
🧵
It’s time for security that actually prevents breaches — not just detects them after the fact.
🛡️ Introducing the Hardened Runtime:
A new category for modern, AI-powered infrastructure security.
🧵
July 24, 2025 at 2:16 PM
😮💨😮💨😮💨