Cybersecurity

Build a Basic AI Agent From Scratch: Security II

Previous parts of Build a Basic AI Agent From Scratch: Basic Agent Tools Long Task Planning Human …

CVE-2026-56170: CVE-2026-56170: Remote Denial of Service via Resource Exhaustion in ASP.NET Core

CVE-2026-56170: Remote Denial of Service via Resource Exhaustion in ASP.NET Core Vulnerability ID…

Ruby Shipped the Fix for SleeperGem 45 Days Before It Happened

On June 3rd, Bundler 4.0.13 shipped a feature called cooldown. The release post described the proble…

Sandbox Environments for Hosted Activation and RLM Cloud

Explore, test, and iterate, with sandbox environments. Simulate your real-world licensing setup wi…

Gitea's Docker Image Shipped a Dangerous Default, and It's Still Catching People

Gitea's Docker Image Shipped a Dangerous Default, and It's Still Catching People Gitea <=1.26.2 ha…

Preventing Session Cookie Reuse Across Devices: Addressing Security Concerns with Alternative Solutions

Introduction The manager’s directive to prevent session cookie reuse across devices originates fro…

Secure Test Credentials with the YoBox Password Generator

Test credentials are the most under-thought attack surface in modern engineering. Every team has a p…

A Windows User's Guide to Catching Suspicious Processes (Before They Cause Trouble)

Here's the refined version, ready for Dev.to. It's more engaging, naturally introduces SysPulse with…

Critical wp2shell WordPress flaws exploited to install webshells

Hackers are exploiting the "wp2shell" critical vulnerability suite (CVE-2026-63030 and CVE-2026-6013…

I ran my Solidity scanner across the 10 most-audited codebases in web3. Here's every flag.

The dirty secret of automated smart-contract security tools isn't that they miss bugs. It's that the…

GHSA-8WHX-365G-H9VV: GHSA-8whx-365g-h9vv: HTML5 Named Whitespace Bypass in Loofah allowed_uri? Validation

GHSA-8whx-365g-h9vv: HTML5 Named Whitespace Bypass in Loofah allowed_uri? Validation Vulnerabilit…

Best free IP APIs: server-side vs client-side — they're not the same problem

Best free IP APIs: server-side vs client-side — they're not the same problem "What's the best free…