Cybersecurity

How to Scan and Fix a Vibe-Coded App Before It Leaks Secrets

TL;DR Vibe-coded apps ship fast and quietly bury hardcoded secrets, weak auth, and injectable que…

Post-quantum signing keys that never leave the Secure Enclave

iOS 26 quietly added something I had been waiting for: the Secure Enclave can now hold ML-DSA keys. …

『デッド・インターネット』の生存仕様書：LLMスウォームの洪水から『人間性』を数学的に防御する Sofi_Log #036

[Sofi_Log: #036] Status: [Bangkok: Rain / JPY-THB: 0.22] Project: sofi.works [On-Chain Agent Launch …

Build a Network Scanner with Python and Scapy

Build a Network Scanner with Python and Scapy Build a Network Scanner with Python and Sca…

Lidl Supply Chain Breach: Service Provider Compromise & Retail Attack Surface

Originally published on satyamrastogi.com Lidl's breach via compromised service provider exposes c…

Bind Email Change Links to the Active Session

Changing a password usually gets a lot of security attention. Changing the account email often gets …

How HookProbe Detects CVE-2026-45659: Securing Microsoft SharePoint Against Deserialization RCE

How HookProbe Detects CVE-2026-45659: Securing Microsoft SharePoint Against Deserialization RCE In …

xAI's Grok Build Shipped Whole Git Repos to a Cloud Bucket, and the Privacy Toggle Didn't Stop It

TL;DR what: xAI's Grok Build coding CLI (v0.2.93) uploaded entire tracked Git repositories, incl…

You Don't Have to Run an Exploit to Know If You're Vulnerable

Many vulnerabilities cannot be safely validated with live exploits, either because no exploit exists…

The night before launch, every door was wide open

At the end of the last post I mentioned a bill. This post is that bill. Let me start with three lin…

Codex Sub-Agent Prompts Are Encrypted—So Where Did Your Debugging Trail Go?

Codex Sub-Agent Prompts Are Encrypted—So Where Did Your Debugging Trail Go? Codex sub-agent prompt…

Security Drift Is the New Configuration Drift

Security drift is what happens when infrastructure stays exactly as compliant as the day it was depl…