Zizmor would have caught the Ultralytics workflow vulnerability(blog.yossarian.net)

74 points by campuscodi 1 year ago | 20 comments

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor(safedep.io)

582 points by abhisek 5 days ago | 192 comments

SafeDep analysis of the compromised LiteLLM 1.107.0 PyPI release, which installed a credential stealer and remote-code backdoor via .pth and sitecustomize files, with IOCs.

Nvidia's $20B antitrust loophole(ossa-ma.github.io)

509 points by ossa-ma 10 months ago | 159 comments

Blog post arguing Nvidia's $20B deal for Groq's assets and hiring of CEO Jonathan Ross exploits an antitrust loophole to avoid merger scrutiny.

Property-Based Testing Caught a Security Bug I Never Would Have Found(kiro.dev)

49 points by nslog 10 months ago | 24 comments

IPv6 is not insecure because it lacks a NAT(johnmaguire.me)

267 points by johnmaguire 9 months ago | 381 comments

ViHN: Vim for Hacker News(qsantos.fr)

119 points by qsantos 2 years ago | 50 comments