Cybersecurity

I went through 50 healthcare software breaches on the HHS portal. the same 7 causes keep showing up.

The HHS Office for Civil Rights publishes every healthcare data breach affecting 500+ people on a pu…

Building a Decompiler Pipeline in Rust: Why Fission Separates NIR and HIR

Building a Decompiler Pipeline in Rust: Why Fission Separates NIR and HIR Decompiler output often …

CVE-2026-59197: CVE-2026-59197: Heap Out-of-Bounds Write and Division-by-Zero in Pillow libImaging

CVE-2026-59197: Heap Out-of-Bounds Write and Division-by-Zero in Pillow libImaging Vulnerability …

The Execution Gap

AI agents can now act in the real world. Almost nothing checks whether they're allowed to. On day …

The Terrapin Attack: How a Few Deleted Packets Weaken SSH

SSH is the protocol most engineers trust without a second thought. Terrapin, disclosed in December 2…

Kimi K3 Open Weights Are Coming-Run This 10-Minute Supply-Chain Gate First

Kimi K3 arrived with 2.8 trillion parameters and an Arena coding score that briefly displaced every …

Malware Deep Dive: Urelas

Deep Dive: Urelas (Trojan) Today we are analyzing the Urelas malware family, which falls under the…

Password Reuse Statistics: The Silent Security Killer

You probably reused a password today. Don't worry—you're not alone. 65% of people use the same passw…

Memory poisoning: the one injection that never leaves

Most prompt-injection discussions assume a single bad turn: a poisoned web page or document slips an…

Souveraineté IA : partagez la méthode, protégez le savoir-faire

En 1883, Auguste Kerckhoffs publie dans le Journal des sciences militaires une règle qui tient encor…

Open-Source Android AI Agents Could Let Invisible Screen Text Run Code on Host PCs

An Android app that can draw over other windows and write to shared storage can slip instructions to…

Where Stave Gets it Wrong

✓ Human-authored analysis; AI used for formatting and proofreading. Stave is a cloud configurat…