AI tools, cybersecurity and development news aggregated from top sources — saved permanently with unique URLs.
Redact Agent Traces Without Breaking the Diff
Redact Agent Traces Without Breaking the Diff Illustrative scenario, not a real incident. An agen…
AetherScope V2.2.1 — Cockpit Spatial WebGL 2 SAST
🪐 AetherScope V2.2.1 — Cockpit Spatial WebGL 2, SAST Zero-Day Detector (185+ CWE) & Serveur MCP (Sco…
The file your agent reads before you — a poisoned AGENTS.md, dissected
Your coding agent reads three things before it reads you, and we've spent this week dissecting all t…
CVE-2026-63475: CVE-2026-63475: Persistent Denial of Service via Circular Symbolic References in isomorphic-git
CVE-2026-63475: Persistent Denial of Service via Circular Symbolic References in isomorphic-git V…
Your old token approvals are a loaded gun: how ERC-20 approve, Permit2 and setApprovalForAll get you drained
Most people think a wallet gets drained when someone steals the seed phrase. In 2026 the more common…
The Supabase view Claude created that anyone could read
Claude Code created a view for me through an MCP SQL tool: a clean create view public.my_view as ...…
A Free Allowance Is Not a License to Paste: Budget the Bytes Before They Reach the Model
Illustrative scenario (constructed for this article, not an incident report). A platform team plans …
Your Lovable app shows everyone's data. Here's the 10-minute Supabase RLS fix
If you built an app with Lovable, Bolt or Replit on top of Supabase, open a second browser, sign up …
Payload CMS access control lives in collection functions
Payload CMS access control lives in collection functions Payload CMS combines an admin panel, auth…
10 wordpress plugin vulns i reported are public
wpscan published 10 vulnerabilities i found and reported, all in one plugin: security for woocommerc…
Browser Storage Upload: Webhook Notification Rules for Private-Bucket Retention, Thumbnails, and Virus-Scan Processing
Short answer: let the browser upload a signed object into a private quarantine bucket, then let a ve…
Your AI built the app. These 3 holes ship with it.
Your AI builder optimised for one thing: the demo works. It did not optimise for safe. Here are the …