Looks similar
How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos(research.kudelskisecurity.com)
657 points by spiridow | 219 comments
Kudelski Security research post describing how a pull request to CodeRabbit led to remote code execution and write access to about one million repositories.
Related stories
Mullvad exit IPs are surprisingly identifying(tmctmt.com)
521 points by RGBCube | 318 comments
Blog post explaining how Mullvad VPN deterministically assigns exit IPs based on a user's WireGuard key, making them usable as a fingerprinting vector.
MacOS sometimes leaks traffic after system updates(mullvad.net)
344 points by dulvui | 172 comments
Mullvad blog post reporting that macOS can leak traffic outside the VPN tunnel after system updates because the firewall ignores rules until a reboot.
I'm being cyberattacked by Tesla, Inc(dreamstation.systems)
389 points by robinpie | 109 comments
Personal blog post describing persistent attack traffic in nginx logs from IPs with Host/Referer headers pointing to pool-ntp.tesla.com.
Io_uring, kTLS and Rust for zero syscall HTTPS server(blog.habets.se)
444 points by guntars | 138 comments
Blog post describing building an HTTPS web server in Rust using io_uring and kernel TLS to avoid system calls on the request path.
RustDesk now supports true unattended remote access on Wayland(rustdesk.com)
329 points by rustdesk | 142 comments
RustDesk blog post announcing unattended remote access support on Wayland, including multi-monitor setups, with a preview build for Debian/Ubuntu x86_64.
Mozilla to UK regulators: VPNs are essential privacy and security tools(blog.mozilla.org)
737 points by WithinReason | 318 comments
Mozilla Open Policy & Advocacy blog post urging UK regulators not to undermine VPNs, arguing they are essential privacy and security tools.












