AI tools, cybersecurity and development news aggregated from top sources — saved permanently with unique URLs.
When Detection Becomes Physical Action: Engineering Autonomous Wildfire Defense
FireDome’s California test program shows why autonomous wildfire defense has to be evaluated as a co…
An MCP tool set can gain a digest without changing
A server can advertise the same tools on two days and receive different answers from a measurement s…
The viewer checked the domain, the delete button didn't: cross-tenant quarantine IDOR in MailWatch (CVE-2026-85749)
TL;DR What: In MailWatch, the web front end for MailScanner, the quarantine action endpoint look…
Black October: AI sped up the hunt for vulnerabilities, and the bill came due
This post was originally published in Portuguese on my blog: Black October: a IA acelerou a caça às …
Agents that don't wait for you to ask: the price of privacy and of compute
This post was originally published in Portuguese on my blog: Agentes que não esperam você pedir: o p…
Before Automating SOC 2 Evidence, Decide What Not to Collect
An enterprise security review asks you to explain how your security controls operate. That does not…
One Range header skipped the firmware assignment check: CVE-2026-16454 in Eclipse hawkBit
TL;DR What: In Eclipse hawkBit, the device API's artifact download ran its assignment check only…
Most phones have no duress PIN, so we built emergency erase into Morse Messenger
Originally published on joinmorse.com, where the diagrams are animated. Short answer: only Graphene…
Six security holes I check for before a Supabase + Stripe app goes live (with the fix for each)
Apps built fast with Lovable, Bolt, Cursor or Claude Code tend to break in the same few places. The …
Auditing an Arch endpoint after a suspicious AUR install
Auditing an Arch endpoint after a suspicious AUR install A malicious install script changes the in…
Frigate recording retention: continuous, motion and alerts, and how big a disk you need
Recording is the easy part of a Frigate NVR to switch on and the hard part to size. Without a plan, …
Developers Clicked 'Don't Ask Again.' Claude Code Saved Their Passwords — and 1,122 of Those Files Are Sitting on Public GitHub.
Every well-run home has one rule about keys: you do not leave them in the front door. It turns out t…