Cybersecurity

OnTrac notifies customers of data breach after network hack

OnTrac parcel delivery company is informing that hackers breached its corporate network and may have…

CVE-2026-59215: CVE-2026-59215: Insecure Direct Object Reference in Open WebUI Thread Message Lookup

CVE-2026-59215: Insecure Direct Object Reference in Open WebUI Thread Message Lookup Vulnerabilit…

The Evaluation Had a Sandbox. It Needed an Authority Boundary.

On July 16, Hugging Face disclosed an intrusion into its internal infrastructure. A malicious datase…

Securing the Boundary: Mitigating Zero-Day Vulnerabilities in Modern API Gateways

The Edge as a Primary Attack Vector In modern platform engineering, the API gateway is no longer j…

The $180 Hour

An AI agent burned through my API budget while I made coffee. Here's what I built because of it. A…

Hermes AI agent used to automate attack on Thai Finance Ministry

A threat actor used the open-source Hermes AI agent in unattended "YOLO" mode to automate post-explo…

Link Shorteners for Financial Services Security and Compliance

Link Shorteners for Financial Services Security and Compliance Financial institutions face unique …

CVE-2026-59222: CVE-2026-59222: Sensitive Data Exposure in Open WebUI Channels API

CVE-2026-59222: Sensitive Data Exposure in Open WebUI Channels API Vulnerability ID: CVE-2026-592…

『画面を飛び出したAIスウォーム』：バンコクの物理世界（IoT・都市物流）を無人で侵食する「O2O物理ハック仕様書」 Sofi_Log #040

'AI Swarm That Leapt Off the Screen': Thonglor's Tropical Night and the 1 AM Autonomous Physical Hac…

『画面を飛び出したAIスウォーム』：バンコクの物理世界（IoT・都市物流）を無人で侵食する「O2O物理ハック仕様書」 Sofi_Log #040

'AI Swarm That Leapt Off the Screen': Thonglor's Tropical Night and the 1 AM Autonomous Physical Hac…

Token Stateless

What a Mobile Developer Learned Diving Into Cookies, Sessions, and Auth A React Native developer's…

『画面を飛び出したAIスウォーム』：バンコクの物理世界（IoT・都市物流）を無人で侵食する「O2O物理ハック仕様書」 Sofi_Log #040

[Sofi_Log: #041] Status: ACTIVE - Bangkok Sukhumvit Node [Temp: 33°C] Telemetry: SQLite V26.1 / Cycl…