Cybersecurity

NETO: Chat P2P local para equipos dev — sin nube, sin excusas

¿Tu equipo comparte credenciales por Slack? ¿Discuten arquitectura en un SaaS que almacena cada mens…

🛡️ Threat Intel Diario — 23/06/2026

🤖 Auto-generated daily threat intelligence digest — June 23, 2026 🚨 Alertas de ciberseguridad en la…

Passkeys vs SMS OTP for Real-World Logins

SMS OTP is still the default second factor for a lot of banks, retailers, and marketplaces because e…

73% of AI-agent credential leaks trace back to one mundane thing: debug logging

A paper accepted to ASE 2026 — "How Your Credentials Are Leaked by LLM Agent Skills: An Empirical St…

AI Governance Trends 2026: What Enterprise Teams Need to Know

By Shannon Williams, President & Co-founder of Obot AI 56% of CEOs say AI has delivered no measurab…

The Tool Found Corridor Nodes — But the Bigger Finding Was Where It Found None

A few weeks ago I published corridor-lab — a Docker lab that proved a triage mismatch: a service tha…

npm Supply Chain RAT: PostCSS Impersonation & Dependency Confusion

Originally published on satyamrastogi.com Three malicious npm packages masquerading as PostCSS too…

Scattered Spider members plead guilty to hacking Transport for London

Two members of the 'Scattered Spider' cybercrime group pleaded guilty to hacking the Transport for L…

How to stop an AI agent from burning $47,000 in a loop nobody noticed.

A multi-agent research system sat in production for eleven days doing exactly what it was built to d…

Fake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 Agents

Security firm AIR built a fake AI agent skill, pushed it through a popular skill marketplace and an …

Trump Order Sets 2030 Deadline for Federal Post-Quantum Crypto Migration

President Trump signed an executive order on June 22 setting hard deadlines for federal agencies to …

Vyper for Solidity Developers: The Security Tradeoffs Nobody Explains

I audit both Solidity and Vyper, and developers coming from Solidity often assume Vyper is just "Pyt…