AI tools, cybersecurity and development news aggregated from top sources — saved permanently with unique URLs.
A bug isn't fixed until the reporter says it is
How we built Reporter-to-Release: a desk that cleans every report, proves the bug with a failing tes…
Detecting CVE-2026-101909 in JavaScript Application Inventories
Detecting CVE-2026-101909 in JavaScript Application Inventories An Axios dependency can be difficu…
Unauthenticated Cross-Session File Deletion Through Broken Access Control
A security vulnerability was identified in a file management workflow that allowed an unauthenticate…
Dozens of VPN Credentials in a Leak — What to Do in the First 24 Hours
A field note about a threat report that said "no evidence of valid credentials" — the one sentence a…
Can an MCP Server Actually Help Prevent AI Agents From Leaking Secrets?
I've been experimenting with MCP servers and AI coding agents while building an open-source project …
My cash-flow agent stopped trusting due dates after HindsightMy cash-flow agent stopped trusting due dates after Hindsight
Most AI finance tools predict cash flow using invoice due dates. But due dates are promises, not pay…
Claude Code's don't-ask-again file held 1,379 secrets in 1,122 public repos: what settings.local.json really saves
When Claude Code asks to run a shell command and you pick "Yes, and don't ask again", it writes an a…
Hardening Axios formSerializer After CVE-2026-101909
Hardening Axios formSerializer After CVE-2026-101909 CVE-2026-101909 shows why defaults inherited …
Said-No: a wallet that remembers what you refused
Most wallets remember approvals. They keep a list of contracts you allowed and addresses you paid. A…
My privacy feature was leaking whole words: shipping Synapse Shield v0.10.5
I've been working on Synapse Shield on my own for a while now. It's a self-hosted bot protection lib…
Container & Image Security Scanning
⚡ TL;DR: Catch CVEs in base images and dependencies before they ship by scanning early and failing t…
CVE-2026-101909 Impact Boundaries: Multipart, URL-Encoding, and Denial of Service
CVE-2026-101909 Impact Boundaries: Multipart, URL-Encoding, and Denial of Service The impact of CV…