Cybersecurity

Solana Surges Amidst Market Uncertainty

🔗 Live Dashboard: autonomous-portfolio-2026.live 📢 Telegram Channel: t.me/AII2026futher T…

GHSA-C3XH-98XP-6QHF: GHSA-C3XH-98XP-6QHF: Command Injection via Issue Title in Discord Notification Workflow

GHSA-C3XH-98XP-6QHF: Command Injection via Issue Title in Discord Notification Workflow Vulnerabi…

Why block counts are not enough for agent safety

A block count is not an audit record. If an agent guard says it blocked 200 actions, I still need t…

Agent guards need receipts, not just block counts

A lot of AI-agent safety tooling is framed around blocking bad actions. Blocking matters, but it is…

VeriLync- Application Security for SaaS Scale-ups

I studied MSc Applied Cybersecurity at the University of South Wales. My dissertation was titled "De…

CISA Sounds the Alarm: FortiBleed Leak Exposes Fortinet Credentials, Secure Your Devices Now

TL;DR what: CISA issued an urgent advisory after the FortiBleed leak dumped authentication crede…

Racing a Next.js API route: coupon abuse with Prisma and SQLite

OopsSec Store validates a coupon and increments its counter in two separate database calls. Send eno…

GHSA-F4XH-W4CJ-QXQ8: GHSA-F4XH-W4CJ-QXQ8: Arbitrary Server-Side File Read in LangSmith SDK TracingMiddleware

GHSA-F4XH-W4CJ-QXQ8: Arbitrary Server-Side File Read in LangSmith SDK TracingMiddleware Vulnerabi…

Precision Loss and Rounding Exploits in Financial Smart Contracts

A smart contract does not need an overflow, reentrancy bug, or broken access-control check to lose m…

Building lavanderia-crm — 2026-06-20

When I first started working on the Lavandería CRM project, I never imagined that one of the biggest…

Why your monorepo audits are lying to you (and how to fix the rot)

We’ve all been there: running a dependency audit, seeing a tool report 100 "unused" files, and reali…

bcrypt and Laravel: 72 Bytes, Not 72 Characters

I expected bcrypt to silently drop characters past 72. I did not expect it to bake in half an emoji.…