AI tools, cybersecurity and development news aggregated from top sources — saved permanently with unique URLs.
Worth a MalExt Report? A 2 Million-User Chrome Extension Added Give Freely/Wildlink in a 5-Day Update
I've been reversing the 2M+ user Volume Booster Chrome extension and found something interesting. Be…
Hidden KYC: How Banks Silently Track Your WiFi Network
TL;DR In the summer of 2024, a major European retail bank detected a surge in synthetic identity f…
BSSID Collection: How Banks Map Your Home WiFi
TL;DR In 2024, a UK financial institution blocked a legitimate customer's account after a trip fro…
From IP Geolocation to WiFi Positioning: The KYC Evolution
TL;DR The landscape of Know Your Customer (KYC) verification is shifting from broad IP-based geolo…
Geo-KYC: Qué Hace Tu Banco En Secreto Con Tu WiFi
TL;DR En 2024, un usuario en México intentó realizar una transferencia internacional desde su comp…
CVE-2026-5079: CVE-2026-5079: Denial of Service via Uncontrolled Resource Consumption in Multer Multipart Parser
CVE-2026-5079: Denial of Service via Uncontrolled Resource Consumption in Multer Multipart Parser …
Cómo frenamos bots sin CAPTCHA: proof-of-work en el navegador (Cloudflare Workers)
En Multita tenemos una consulta de multas gratis y pública: poné una patente o un DNI y te traemos l…
Mobile view bug
There is a music streaming platform, which is supposed to only let registered users to play and down…
Captcha-Solving Integration Patterns for Automated Multi-Profile Sessions
Roughly 40% of all web traffic in 2026 gets intercepted by a captcha at least once per session. For …
CVE-2026-9595: CVE-2026-9595: WebSocket Proxying Vulnerability in webpack-dev-server leading to Host/Origin Validation Bypass
CVE-2026-9595: WebSocket Proxying Vulnerability in webpack-dev-server leading to Host/Origin Validat…
I cut my security tool from 9 detectors to 6, on purpose
Last month I almost shipped a security tool that lied about itself. Not on purpose. I had detectors…
I had real backend auth. The browser just walked around it.
Here's the thing nobody warns you about when you put Supabase behind a "real" backend. My stack is …