<Tech News/>
Stay updated with the latest technology trends, programming insights, and industry developments
Our SSRF guard passed every test we ran — until a stranger's comment pointed out the test we never ran
Three weeks ago, in the comments under a post about a different SSRF bug (CVE-2026-19304, a...
An OpenAI Agent Swarm Attacked RubyGems
An OpenAI agent swarm uploaded hundreds of malicious gems to RubyGems.org, chaining a RubyDoc.info R...
The Redirect Is Part of the Threat Model: Hardening MCP Clie...
I was reading the release notes for the MCP Python SDK while planning this month’s AAIF Ambassador.....
Inside the LiteLLM hack: 153GB, 433,909 Files, 2,488 Organiz...
Inside the LiteLLM hack: 153GB, 433,909 Files, 2,488 Organizations Attackers dumped...
Web Traffic Inspector Dash
Mischievous Behavior Detected 🔎 It all started when I discovered an anonymous user was...
Day 41: EXPOSE Does Not Publish, and a KMS Key Has No Name
Three things today looked like they did something and did not. A comment at the end of a Dockerfile....
2:47 AM: Someone Tried to Open a File on My Laptop. Here's t...
I wasn't going to write a normal launch post. You know the format. Every "I built X" post on this.....
How Seed4J Validates Compatibility
How Seed4J uses Renovate, GitHub Actions, and 25 generated project configurations to validate compat...
Hardening a SaaS login on Cloudflare Free: Turnstile, Google...
SyllogOS is a multi-tenant platform I'm building for Greek cultural associations and the federations...
Why User Provisioning Matters for Enterprise AI
Offboarding a user is not enough when the credentials they leave behind can still spend money and...
I Shipped 'Passwordless Login.' It Still Asked for a Usernam...
WebAuthn's own demo code creates a credential the browser can't find on its own — so your passkey bu...
The New Attack Surface: AI Agents With Access to APIs, Datab...
Your agent can read support tickets, query Postgres, call internal APIs, and run shell commands to.....
Other Tech News
Jiga (YC W21) Is Hiring Product Engineer (Remote/US)
Lingo.dev (YC F24) is hiring a senior content engineer (Remote, worldw...
US confirms for first time it has deployed space weapons
Opalite Health (YC W26) Is Hiring – Founding GTM
Poisson Disk Sampling
Proliferate (YC S25) Is Hiring
We gave nine LLMs the same PDF. Two answered without reading it
GitHub Trending
mix1009/model-keyword: Automatic1111 WEBUI extension to autofill...
facebookresearch/spdl: Scalable and Performant Data Loading
emersonfelipesp/netbox-proxbox: Netbox Plugin for integration bet...
MozillaFoundation/foundation.mozilla.org: Mozilla Foundation webs...
ibehren1/fw-gui: GUI for the management of VyOS firewall configur...
netbox-community/netbox: The premier source of truth powering net...
mozilla-releng/balrog: Mozilla's Update Server
apify/awesome-skills: Community collection of Apify agent skills...
DataDog/dd-trace-py: Datadog Python APM Client
opengisch/QFieldCloud: QFieldCloud allows seamless synchronizatio...
wkentaro/labelme: Image annotation with Python. Supports polygon,...
physiclaw/PhysiClaw: The AI agent that interacts with you in the...
lxfight/astrbot_plugin_mnemosyne: 一个AstrBot插件，实现基于RAG技...
FlashML-org/FreeToken: FreeToken brings datacenter-scale model se...
makerspet/oomwoo: Open-source vacuum robot cleaner
geigerzaehler/beets-alternatives: Beets plugin to manage external...
Blosc/python-blosc2: A high-performance library for compressed ND...
tanaybhomia/Whisp: The Anti-Note for GNOME.
hail-is/hail: Cloud-native genomic dataframes and batch computing
mbillow/localthings: Local-control Home Assistant component that...