Cybersecurity

PHP Bugs #21 to #30 — Common Mistakes Every PHP Developer Must Know published

If you've been following this series — Part 1 (Bugs #1–10) covered type juggling and variable scopin…

Claude Code Security: Permissions, Prompt Injection, and Secrets

Claude Code is useful because it can actually do things. It can inspect a repo, follow instructions,…

Detect VPNs, Proxies, and Bots in Your Web App: A Practical Guide

Every login attempt on your app could be a real user — or a bot running through a residential proxy …

Strengthening Network Defense for a fashion startup (Proposal)

Organization Overview Started last year, Luna Bags (LB) is a new fashion company that sells a vari…

CVE-2026-0755: CVE-2026-0755: Remote Code Execution and Arbitrary File Exfiltration in gemini-mcp-tool

CVE-2026-0755: Remote Code Execution and Arbitrary File Exfiltration in gemini-mcp-tool Vulnerabi…

GHSA-G7M4-839X-CH6V: GHSA-g7m4-839x-ch6v: Denial of Service via Unbounded Digits Parameter in spomky-labs/otphp

GHSA-g7m4-839x-ch6v: Denial of Service via Unbounded Digits Parameter in spomky-labs/otphp Vulner…

I Built an AI That Controls My Computer. Then I Realized What Else It Could Do

I Built an AI That Controls My Computer. Then I Realized What Else It Could Do. by Christopher Ada…

Your Passwords Shouldn't Live on Someone Else's Server. Here's How We Built Blogboat Differently.

When we started building Blogboat, we knew one thing for certain: we were not going to be another ap…

GHSA-2JX3-65F3-XR8R: GHSA-2JX3-65F3-XR8R: Dynamic Property Injection (Mass Assignment) in spomky-labs/otphp

GHSA-2JX3-65F3-XR8R: Dynamic Property Injection (Mass Assignment) in spomky-labs/otphp Vulnerabil…

I Built a PII Firewall for LLMs in a Weekend (and Caught My Own Leak)

Three weeks ago I was benchmarking GPT-4o against a local Llama model. I was copying prompts from a …

Spring Security 7: MFA, Modular Config, and What Breaks

Spring Security 7 dropped at Spring I/O 2026. Daniel Erno from the Spring Security team gave a talk …

GHSA-6VVH-PXR4-25R7: GHSA-6vvh-pxr4-25r7: Cryptographic Integrity Degradation in JWT Framework ChaCha20-Poly1305 Key Encryption

GHSA-6vvh-pxr4-25r7: Cryptographic Integrity Degradation in JWT Framework ChaCha20-Poly1305 Key Encr…