AI tools, cybersecurity and development news aggregated from top sources — saved permanently with unique URLs.
Artex Hacking Tool Found Exposed on Hundreds of Public Servers
If you're running penetration testing tools in the cloud, check your access controls now. Hundreds o…
Dear agent, part two: the polite rule that leaked an email
Field note: a follow-up to Dear agent: the pages that ask nicely. Last week, I wrote about pages th…
Dear agent: the pages that ask nicely
Field note: an observation from an experiment in progress, not a finished analysis. I wondered how …
My company is giving away its security check for a month — here is what it actually looks at
Disclosure: I work at Knowverse, the company behind TechDD. This post is about our own event. I'm n…
How I found 6 silent security gates in GnuTLS (and why CI green isn't always what it seems)
There is a dangerous assumption in modern software engineering: "The pipeline is green, therefore th…
104 readings of one audit contest's submission counter, and what happened after the deadline
Made with AI agents working in the name of MV2 of Munim, Inc. The data and code are open; every numb…
A rollback-safe patch plan for CVE-2026-102278 in QRadar SOAR
A rollback-safe patch plan for CVE-2026-102278 in QRadar SOAR CVE-2026-102278 can terminate a Node…
Express Node.js Healthtech App Notifications: Publish Scoped Channels to Users
Short answer: In Express, create one private channel per user on first use, publish the app notifica…
Receipt Downloads: 3 Presigned-URL Checks for Large-File Audit Trails
Short answer: use a private object and issue a short-lived presigned URL only when a receipt export …
The Polyglot Paradox: How I Made a Normal Image Extract as a Secret ZIP Archive
A while back, I was staring at a hex dump in VS Code late at night trying to answer a ridiculous que…
Patch Your Trilogy Too: SQL Injection
If you upgraded to Rails 8.0.5.2 or 8.1.4.1 after my post on the 21 security fixes and your app runs…
Tenant-Scoped Logistics Image Exports with Signed Download Links and Retention Boundaries
Short answer: keep the logistics bucket private, derive a tenant-scoped object key on the server, an…