Cybersecurity

Certificate-Pinned HTTPS for Video API Clients Without Downtime

The morning a transparent proxy almost ate our API keys A fetch worker on one of our Asia-Pacific …

GHSA-G5R6-GV6M-F5JV: GHSA-G5R6-GV6M-F5JV: Arbitrary File Read and Exfiltration in mcp-atlassian via Missing Path Validation

GHSA-G5R6-GV6M-F5JV: Arbitrary File Read and Exfiltration in mcp-atlassian via Missing Path Validati…

Como impedir que um plugin de IA roube seus dados

Vi um comentário essa semana que tem fundamento e deveria ser a preocupação de todos: "Depois que…

CVE-2026-54158: CVE-2026-54158: Stored Cross-Site Scripting to Host Remote Code Execution in SiYuan

CVE-2026-54158: Stored Cross-Site Scripting to Host Remote Code Execution in SiYuan Vulnerability…

Bitwarden vs 1Password: Which Password Manager Should You Use?

A feature-by-feature comparison of two leading password managers — open source and free versus polis…

I put a WAF on the front door. The spam wasn't using the front door.

There's a small corporate site. A few days after launch, one piece of spam landed in the contact for…

CVE-2026-50551: CVE-2026-50551: Stored Cross-Site Scripting to Remote Code Execution via Attribute View Asset Cell Renderer in SiYuan

CVE-2026-50551: Stored Cross-Site Scripting to Remote Code Execution via Attribute View Asset Cell R…

Privacy Notes for Facebook Temp Mail Checks

When a team says they need temp mail for facebook testing, the real problem is usualy not Facebook i…

GHSA-H4G2-XFMW-Q2C9: GHSA-H4G2-XFMW-Q2C9: Missing Authentication Bypass in Clauster Configuration Validator

GHSA-H4G2-XFMW-Q2C9: Missing Authentication Bypass in Clauster Configuration Validator Vulnerabil…

SSL Inspection Causes Certificate Errors in Developer Tools: Scalable Solutions Needed to Avoid Manual Workarounds

The SSL Inspection Dilemma: Balancing Security and Developer Productivity SSL inspection serves as…

Where should AI workloads run? A sovereign and sensible approach

Canonical: Where should AI workloads run? A sovereign and sensible approach — read the full article …

GHSA-G936-7JQJ-MWV8: GHSA-g936-7jqj-mwv8: Administrative Token Leakage and Privilege Escalation in TSDProxy

GHSA-g936-7jqj-mwv8: Administrative Token Leakage and Privilege Escalation in TSDProxy Vulnerabil…