We pwned X, Vercel, Cursor, and Discord through a supply-chain attack(gist.github.com)

1080 points by hackermondev 10 months ago | 397 comments

A GitHub Gist writeup by a 16-year-old researcher describing a critical XSS vulnerability in Mintlify docs that affected X, Vercel, Cursor, Discord and others.

1 bug, $50k in bounties, a Zendesk backdoor(gist.github.com)

1542 points by mmsc 2 years ago | 400 comments

A GitHub Gist write-up by a 15-year-old bug hunter describing a Zendesk bug affecting many Fortune 500 companies that earned over $50,000 in bounties.

A phishing attack involving g.co, Google's URL shortener(gist.github.com)

345 points by zachlatta 1 year ago | 147 comments

A GitHub Gist by Zach Latta describing a sophisticated phone-based phishing attempt impersonating Google that abused the g.co domain to steal Google accounts.

Obfuscating Lua (2019)(gist.github.com)

39 points by shakna 2 years ago | 10 comments

Hofstadter on Lisp (1983)(gist.github.com)

360 points by Eric_WVGG 2 years ago | 204 comments

A GitHub Gist reproducing Douglas Hofstadter's 1983 Scientific American introduction to Lisp, "Atoms and Lists," from Metamagical Themas.

Roc rewrites the compiler in Zig(gist.github.com)

322 points by todsacerdoti 1 year ago | 237 comments

A GitHub Gist by Richard Feldman explaining why the Roc programming language's compiler is being rewritten from Rust in Zig.

Disrupting the first reported AI-orchestrated cyber espionage campaign(anthropic.com)

341 points by koakuma-chan 11 months ago | 261 comments

Anthropic news post describing how it detected and disrupted a cyber espionage campaign largely orchestrated using its Claude AI model, with a linked full report.

Git-bug: Distributed, offline-first bug tracker embedded in Git(github.com)

322 points by alentred 1 month ago | 107 comments

GitHub repository for git-bug, a distributed, offline-first bug tracker that stores issues inside a Git repository.

Strengthening our defenses against distillation attacks(anthropic.com)

21 points by porridgeraisin 13 days ago | 38 comments

Anthropic research post dated Oct 12, 2026 describing how the company is strengthening defenses against distillation attacks on its models.

1 bug, $50k in bounties, a Zendesk backdoor(gist.github.com)

1542 points by mmsc 2 years ago | 400 comments

A GitHub Gist write-up by a 15-year-old bug hunter describing a Zendesk bug affecting many Fortune 500 companies that earned over $50,000 in bounties.

Downfall Attacks(downfall.page)

1207 points by WalterSobchak 3 years ago | 306 comments

Website describing Downfall, a CPU vulnerability affecting billions of modern processors, with attack details, demo, FAQ, and vendor advisories.

A phishing attack involving g.co, Google's URL shortener(gist.github.com)

345 points by zachlatta 1 year ago | 147 comments

A GitHub Gist by Zach Latta describing a sophisticated phone-based phishing attempt impersonating Google that abused the g.co domain to steal Google accounts.