Cybersecurity

N-day is Becoming N-Hour. Patching Faster Won't Save You.

Every patch is a confession. The moment a vendor ships a security fix, the diff between the old cod…

The graph is honest. The annotation is where your agent leaks.

Alexey Spinov shipped a small, sharp idea a while back: a gate that runs BFS over your agent's tool …

🚀How Two Computers Create a Secret Without Ever Sharing It

For quite a time, I was thinking: how does encryption really work? Like, if I want to send a secret…

CVE-2026-59198: CVE-2026-59198: Heap Out-of-Bounds Read in Pillow TGA RLE Encoder

CVE-2026-59198: Heap Out-of-Bounds Read in Pillow TGA RLE Encoder Vulnerability ID: CVE-2026-5919…

Web scraping for AI training is not free data: 7 privacy checks before collection

Web scraping often looks cheap from the outside. A crawler collects pages. A dataset grows. A model…

New Bit2Watt Attack Could Let Cloud Tenants Disrupt Power Grids Without an Exploit

A cloud tenant using nothing but ordinary GPU access can push a data center's power draw up and down…

US seizes over 1,000 websites in FIFA World Cup piracy crackdown

The U.S. Justice Department has seized more than 1,000 websites and blocked 1,970 domains used to st…

Platform engineering for the agentic enterprise: Managing applications, resources, and AI agents

Canonical: Platform engineering for the agentic enterprise: Managing applications, resources, and AI…

Why your agent needs access to your documentation

Canonical: Why your agent needs access to your documentation — read the full article on rasne.dev. …

Stop Building Custom Auth for Your SaaS

I spent three weeks building a custom authentication system for my first SaaS. I wrote the password …

Access Token Hardening with CloudFront JA4 Fingerprints

Introduction Recently, a security engineer @nishikawaakira introduced an approach that uses JA4 TL…

The Banking System Is Not Ready for AI-Powered Attacks

Over the past two months, I experienced three security incidents at the fintech where I work as a te…