GitHub Copilot CLI downloads and executes malware(promptarmor.com)

43 points by sarelta 8 months ago | 12 comments

Linux Kernel Exploitation: Attack of the Vsock(hoefler.dev)

223 points by todsacerdoti 1 year ago | 65 comments

Supporting org.apache.xml.security in graalVM(guust.ysebie.be)

23 points by whizzx 1 year ago | 3 comments

Control-Flow Integrity in V8(v8.dev)

37 points by unripe_syntax 3 years ago | 9 comments

Restructuring GitHub's bug bounty program(github.blog)

47 points by soheilpro 3 months ago | 22 comments

Emacs arbitrary code execution and how to avoid it(eshelyaron.com)

117 points by oskardrums 1 year ago | 95 comments

RCE Vulnerability in React and Next.js(github.com)

559 points by rayhaanj 10 months ago | 214 comments

GitHub security advisory GHSA-9qr9-h5gf-34mp for a critical (CVSS 10.0) remote code execution vulnerability in React Server Components affecting Next.js, with patched versions listed.

AI-Built Torrent Site Looks Inside Downloads to Catch Fakes and Malware(torrentfreak.com)

6 points by HieronymusBosch 14 days ago | 1 comments

TorrentFreak article on TorrentClaw, an AI-built torrent search engine whose TrueSpec feature inspects torrent contents, revealing a malware trick using a genuine VLC player as a decoy.

I'm being cyberattacked by Tesla, Inc(dreamstation.systems)

389 points by robinpie 1 month ago | 109 comments

Personal blog post describing persistent attack traffic in nginx logs from IPs with Host/Referer headers pointing to pool-ntp.tesla.com.

Io_uring, kTLS and Rust for zero syscall HTTPS server(blog.habets.se)

444 points by guntars 1 year ago | 138 comments

Blog post describing building an HTTPS web server in Rust using io_uring and kernel TLS to avoid system calls on the request path.

Node.js Vulnerability Blog(nodejs.org)

6 points by Brysonbw 2 days ago | 1 comments

The Node.js blog's Vulnerabilities category page, listing 2026 security release announcements, an OpenSSL advisory assessment, and a V8 HashDoS post.

New Linux udisks flaw lets attackers get root on major Linux distros(bleepingcomputer.com)

336 points by smig0 1 year ago | 227 comments

BleepingComputer news article about a udisks vulnerability that lets attackers gain root privileges on major Linux distributions.