Assorted links for Wednesday, July 17:

1. Genetic cloaking of healthy cells opens door to universal blood cancer therapy
2. Report: Alphabet close to $23 billion deal for cybersecurity startup Wiz
3. Docker Best Practices: Choosing Between RUN, CMD, and ENTRYPOINT
4. fs-verity: read-only file-based authenticity protection
5. Memory-allocation profiling for the kernel