AI tools, cybersecurity and development news aggregated from top sources — saved permanently with unique URLs.
Appwrite: 5,102 titles, 4,094 fingerprints, and 531 hosts on the default web port
Appwrite: 5,102 titles, 4,094 fingerprints, and 531 hosts on the default web port Appwrite is a se…
Measuring self-managed GitLab exposure without counting the wrong thing
Measuring self-managed GitLab exposure without counting the wrong thing GitLab's CVE-2026-110264 a…
Tamper-evident tamper-proof: what an agent audit log can actually prove
Open any "AI agent governance" page and you'll find the phrase tamper-proof audit log. Treat it as a…
The Protocol That Connects Your AI to Everything Is Also Letting Attackers In
MCP went from "clever plumbing" to "the most exploited attack surface in developer tooling" in under…
How to Check Whether Your Server Is Patched Against PHP2Shell
Two PHP vulnerabilities, nicknamed PHP2Shell, were disclosed on October 21, 2026. They are tracked a…
FortiSIEM and port 27918: what an open port does and does not tell you
FortiSIEM and port 27918: what an open port does and does not tell you FortiSIEM CVE-2026-106173 i…
The Definitive Guide to JWT Security in 2026: HS256 vs RS256 vs ES256, The alg: none Exploit, kid Parameter Attacks, and Token
The Definitive Guide to JWT Security in 2026: HS256 vs RS256 vs ES256, The alg: none Exploit, kid Pa…
Five NGINX CVEs are conditional. Measure the conditions, not just the version
Five NGINX CVEs are conditional. Here is how to measure the conditions, not just the version NGINX…
Flash Loan Attack Vector Analysis: Binance staked ETH
Flash Loan Attack Vector Analysis: Binance staked ETH Target Protocol: Binance staked ETH (TVL: $8…
This Week in PHP Internals | Oct 22, 2026
On Tuesday, two numbers started going around online, a pair of CVE IDs for PHP, with the wrong score…
Log wipers get caught by the sound of the wipe
The scenario is fictional (RFC 5737 IPs). Windows/auditd details are from the book and not sandbox-t…
Claude on a Nokia 3310: a J2ME client, HMAC instead of TLS, and 41 bundled games
I wrote VibeNokia: a Java ME client for the 2017 Nokia 3310 feature phone that turns it into a chat …