Security
Security incidents, vulnerabilities, auth, and defense.
From Supabase to Clerk to Better Auth
Five Banana Lessons
Clarification on the Notepad++ Trademark Issue
Quantum Key Distribution (QKD) and Quantum Cryptography (QC)
Biscuit
Gaps in national food production, worldwide
CVE-2026-31431: Copy Fail vs. rootless containers
Offenders sentenced up to 10 years for spying on TSMC
Ghost Operators: How Israeli telecoms were exploited to track citizens worldwide
How far behind is each major Chromium browser?
Learning Pseudorandom Numbers with Transformers
Investors pile into clean energy as Iran war drives push for energy security
Forging ZK proofs to mint arbitrary DUSK tokens
Clandestine network smuggling Starlink tech into Iran to beat internet blackout
A more efficient implementation of Shor's algorithm
Canonical Under Attack
Inventions for battery reuse and recycling increase more than 7-fold in last 10y
Ubuntu servers taken offline by "sustained, cross-border attack"
A statement about why RightsCon 2026 will not take place in Zambia
After dissing Anthropic for limiting Mythos, OpenAI restricts access to Cyber, too
Canonical/Ubuntu have been under DDoS for more than 15h
CPanel and WHM Authentication Bypass – CVE-2026-41940
Hackers are actively exploiting a bug in cPanel and WHM
Patch Your Kernel NOW: 732byte Python rootkit, cracks all distros since 2017
The Church Rock Uranium Mill Spill
Follow-up to Carrot disclosure: Forgejo
CopyFail was not disclosed to Gentoo developer
Shai-Hulud Themed Malware Found in the PyTorch Lightning AI Training Library
Largest Digital Human Rights Conference Suddenly Canceled
Belgium stops decommissioning nuclear power plants
Copy-fail-destroyer: K8s remediation for CVE-2026-31431
Copy Fail: 732 Bytes to Root on Every Major Linux Distribution
Copy Fail – CVE-2026-31431
Ramp's Sheets AI Exfiltrates Financials
FastCGI: 30 Years Old and Still the Better Protocol for Reverse Proxies
Wire to Replace Signal as Standard in the Bundestag
Carrot Disclosure: Forgejo
I won a championship that doesn't exist
GitHub RCE Vulnerability: CVE-2026-3854 Breakdown
Cybersec is a thankless job: expanding workload and shrinking pay packet
NPM website was down
Three men are facing charges in Toronto SMS Blaster arrests
The woes of sanitizing SVGs
Fast16: High-precision software sabotage 5 years before Stuxnet
EU Age Control: The trojan horse for digital IDs
How Hard Is It to Open a File?
You don't want long-lived keys
