https://hackyjs.com/posts/docker-sandboxes-macos-host-escape-what-guest-code-can-read-and-modify Hacky JS en 2026-09-18T00:00:00.000Z Docker Sandboxes macOS Host Escape: What Guest Code Can Read and Modify docker, container-security, macos, sandbox-escape, devsecops https://hackyjs.com/posts/reverse-engineering-the-brevo-clickfix-injection-how-a-trusted-marketing-script-became-a-dropper Hacky JS en 2026-09-18T00:00:00.000Z Reverse-Engineering the Brevo ClickFix Injection: How a Trusted Marketing Script Became a Dropper supply-chain-attack, clickfix, third-party-scripts, content-security-policy, brevo