Cybersecurity

I Built an Offline SAST Scanner — Try It on Your Code and Tell Me Where It Fails

https://github.com/mattybellx/Ansede I've been working on this on and off for about a year. It star…

Your AI-Built App May Look Ready — But Is It Really Safe?

AI tools are helping people build websites and apps faster than ever. You can create a landing page…

Agents Have Been Building One Layer Too High

Every agent framework today rides on HTTP, a protocol built for documents and human clicks. A new fa…

The Hidden Vulnerability in Automated Malware Cleanups (Why RegEx Fails)

We’ve all been there. A client or stakeholder pings you at an ungodly hour: "The site is flagged. We…

U.S. offers $10 million for hackers targeting WhatsApp, Signal users

The U.S. Department of State is offering up to $10 million for information that helps identify or lo…

We got scraped, so we built a free Ethereum scam API

By Bryan Martin - founder of RektRadar. Ethereum scam-detection infrastructure since 2024. GitHub - …

Mustang Panda Uses Zoho WorkDrive as Command Channel in Indian Government Attacks

The China-aligned espionage group Mustang Panda is running two campaigns against the Indian governme…

cashtoha.sh Scammed Me $3,450.90 — Phantom Power Mining

cashtoha.sh Scammed Me $3,450.90 — Phantom Power Mining The silence of a frozen account is a viscera…

npm Ecosystem — Dependency Management

Quản lý dependency: lockfile, ba loại dependency, và rủi ro supply chain Một dự án Node thực tế ké…

⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and More

This week was a reminder that attackers do not always need big tricks. One small mistake, one old ac…

Adding Google Login to IdentityServer

Comedy of Errors I recently added Google login to an Angular app backed by IdentityServer. Simple e…

I Built a B2B Password Manager in Rust

💡 TL;DR: I built a file-based B2B password manager in Rust with multi-user encryption (DEK wrapping…