AI tools, cybersecurity and development news aggregated from top sources — saved permanently with unique URLs.
Staying signed in on Linux when the keyring doesn't survive a reboot
We keep people signed in on desktop the same way we do on mobile: the session is an access/refresh t…
My scanner passed every local test, then 406'd on a real MCP server — that gap is the point
I built a small passive scanner to check MCP servers. It is read-only: it will not run any of the se…
When an invoice approval check outgrows if user.role == "admin"
Most apps start with a check like this: if user.role == "admin": approve_invoice(invoice) …
Your AI agent said it blocked the attack. I read the source of 5 tools that check if it's lying.
Here's a failure your test suite probably can't see. An AI agent with a send_email tool summarizes …
Anthropic's Red Team Taught an AI to Replicate. The Only Evidence It Left Was a Note to Its Next Self.
On October 12, Anthropic's Frontier Red Team published a result that reads like science fiction and …
One SDLC, two kinds of author: securing development when AI agents write the code
A lot of teams now have two kinds of author in every repository. One is a person. The other is a cod…
Secrets Next.js : 3 garde-fous PowerShell
Un projet Next.js perd ses secrets par deux chemins que ni le typage, ni le linter, ni le build ne s…
Oracle Manipulation Risk Report: MEXC
Oracle Manipulation Risk Report: MEXC Target Protocol: MEXC (TVL: $5400.9M) Executive Su…
What to have ready before your first smart contract audit
An audit is usually the biggest single check an early team writes. And a good part of the first days…
3 Production Security Pitfalls in Next.js App Router (And How to Fix Them)
Building fast with modern AI coding assistants makes shipping fullstack web apps effortless. However…
Is a Claude Code mod safe? How to check an unsandboxed mod before installing it
A Claude Code mod is code that runs without a sandbox, with your permissions. It can read and write …
Your AI coding CLI may still be running after you close it: I reproduced the Codex daemon and wrote an audit
One of the top Hacker News threads today is a GitHub issue asking OpenAI to make the Codex CLI's per…