Jonathans Blog

Claude Code's September 2026 update raises inline command and task output to 128K characters via bashOutputMaxChars and taskOutputMaxChars, plus file-based subagent prompts and an MCP credential-redaction fix.

Runtime guardrail platforms like Lakera Guard, Guardrails AI and NeMo Guardrails now form a mature defensive layer against prompt injection - distinct from the offensive testing tools already covered here.

A comprehensive Wireshark guide for penetration testers - covering capture vs display filters, credential extraction, DNS enumeration, ARP analysis, tshark command-line usage, and TLS decryption.

Wiz Red Agent, Hadrian Nova and Novee Security are 2026's new agentic AI red teaming platforms - autonomously reasoning about attack paths rather than running scripted scans.

TypeScript now sits behind roughly 40% of professional web projects exclusively in 2026 - here's what actually pushed adoption this far and what 'default' really means in practice.

The A record is the simplest DNS entry there is - a hostname pointing at an IPv4 address - but it's worth understanding properly, including TTLs, round robin, and how it differs from AAAA.

Deno 2.9's new deno desktop command wraps a web app in a native window backed by the OS webview, no Electron or Tauri required - here's how it works and when it's actually worth using.