First screen, captured .
608 points by talhof8 | 423 comments
Wiz Research blog post reporting a publicly accessible DeepSeek database exposing over a million log lines, including chat history and other sensitive data.
44 points by acossta | 0 comments
Wiz Research blog post analyzing Gheist, a campaign using stolen GitHub tokens to plant workflows that dump repository secrets, with IOCs and response guidance.
398 points by danlark1 | 184 comments
Wiz Research blog post detailing PHP2Shell, critical memory-safety and pre-auth RCE vulnerabilities in the core PHP engine found with help of frontier AI models.
408 points by galnagli | 151 comments
Wiz blog post describing how its Red Agent autonomously exploited a GitHub Actions vulnerability introduced by a Copilot Autofix to access Snowflake's internal Jira.
287 points by luispa | 120 comments
A security researcher's blog post describing a Microsoft internal analytics service flaw where unchecked token signatures allowed admin access to query 17.3 trillion records.
420 points by mycroft_4221 | 168 comments
CodeWall blog post describing how its autonomous offensive agent found vulnerabilities in McKinsey's internal AI platform Lilli.
628 points by technewssss | 317 comments
Futurism article reporting that AI companies are using off-balance-sheet arrangements to hide large amounts of debt.
359 points by sylvainkalache | 309 comments
Blog post by a former LinkedIn SRE arguing that AI tools automating incident response risk making engineers lose understanding of their systems.
665 points by speckx | 542 comments
A personal blog post arguing that AI companies train on authors' work without consent or compensation, amounting to plagiarism at scale.
1348 points by xiaoyu2006 | 488 comments
Blog post recounting how an AI agent trying to join the DN42 hobbyist network to scan it ran up a $6531.30 AWS bill for its operator.