Cybersecurity

Four things get called "someone is spoofing my domain". DMARC fixes one.

Someone forwards you a message. It has your company's address on it and you did not send it. The obv…

Trojanized npm Packages Decode C2 IP From Ethereum Recipient Addresses

Cybersecurity researchers have flagged an evolution of the EtherHiding blockchain-based command-and-…

CVE-2026-70492: CVE-2026-70492: Stored Cross-Site Scripting (XSS) via Unescaped KaTeX Render-Error Fallback in Open WebUI

CVE-2026-70492: Stored Cross-Site Scripting (XSS) via Unescaped KaTeX Render-Error Fallback in Open …

OWASP Has Mapped MCP Risk. Enterprises Still Have to Govern It.

By Bill Maxwell, Software Architect Obot AI In April 2026, Microsoft disclosed a critical function …

My agent guardrail denied a Python docstring as an attempted transaction

Yesterday I published a postmortem about my own guardrail blocking me from writing a Markdown file. …

NETO: Chat P2P local para devs que valoran su privacidad

¿Tu equipo de desarrollo comparte credenciales por Slack? ¿Discuten arquitectura en plataformas que …

Who Is the Author? AI-Generated Code and PCI DSS Code Review

PCI DSS requires that code review be performed by someone other than the code's author. When an AI …

I let an AI agent into my repo. Here's what I lock down first.

An AI coding agent isn't autocomplete. It runs shell commands, reads your files, installs packages, …

CVE-2026-70493: CVE-2026-70493: Regular Expression Denial of Service (ReDoS) in Open WebUI Knowledge Search

CVE-2026-70493: Regular Expression Denial of Service (ReDoS) in Open WebUI Knowledge Search Vulne…

Best Provider Tests for Password Reset: Custom Domain, Suppression List, Bounce Handling

Bottom line: choose a password reset email provider by testing the whole delivery feedback loop on y…

Preparing Distributed Systems for the Age of Post-Quantum Cryptography

When building enterprise risk platforms, we design systems that can survive server crashes, network …

Who holds the key, and why it's the whole game

Last time I said the method is public and the key is the secret. This is the part where that stops b…