First screen, captured .
335 points by the1bernard | 102 comments
Eye Security research post describing how misconfigured Entra OAuth apps could be abused to gain access to internal Microsoft applications.
532 points by abhisek | 468 comments
SafeDep blog post analyzing a malicious version of the Rust crate arrayref that executes a payload at build time via a supply-chain attack.
343 points by MrBruh | 144 comments
Blog post describing a remote code execution vulnerability found by decompiling AMD's AutoUpdate software, which AMD declined to fix.
441 points by medhir | 368 comments
A blog post arguing that consumers should have the right to install software of their choosing, including root access, on computing devices they own outright.
407 points by pretext | 386 comments
An Anthropic engineering blog post by Addy Osmani describing how the Claude Code team reviews the high volume of code produced by AI agents while minimizing human review time.
424 points by bo0tzz | 89 comments
Wiz Research blog post detailing CVE-2026-3854, a critical flaw in GitHub's internal git infrastructure enabling remote code execution on GitHub.com and GitHub Enterprise Server.
344 points by vinhnx | 95 comments
Astral blog post by William Woodruff describing the techniques Astral uses to secure its open source tools and their build, test, and release processes against supply chain attacks.
488 points by jorangreef | 257 comments
Richard Feldman's blog post reporting on the Roc compiler team's rewrite of 300,000 lines of Rust into Zig, which recently reached feature parity.