Supporting org.apache.xml.security in graalVM(guust.ysebie.be)

23 points by whizzx 1 year ago | 3 comments

Anthropic says OpenClaw-style Claude CLI usage is allowed again(docs.openclaw.ai)

465 points by jmsflknr 6 months ago | 260 comments

OpenClaw documentation page for the Anthropic provider, noting that Anthropic staff said OpenClaw-style Claude CLI reuse is allowed again, alongside API key setup.

OpenSSL 4.1.0(github.com)

165 points by petecooper 3 days ago | 55 comments

GitHub release page for OpenSSL 4.1.0, a feature release adding DTLS 1.3, GREASE support, ML-DSA/ML-KEM optimizations, and dropping legacy Windows targets.

R interface to Apple's MLX library(hughjonesd.github.io)

12 points by dash2 11 months ago | 0 comments

Keycloak open redirect: wildcard redirect URIs can be exploited to steal tokens(securityblog.omegapoint.se)

91 points by pontushanssen 2 years ago | 12 comments

Asterinas: OS kernel written in Rust and providing Linux-compatible ABI(github.com)

328 points by Klasiaster 2 years ago | 176 comments

GitHub repository for Asterinas, a secure, fast, general-purpose OS kernel written in Rust that provides a Linux-compatible ABI.

The RCE that AMD won't fix(mrbruh.com)

343 points by MrBruh 8 months ago | 144 comments

Blog post describing a remote code execution vulnerability found by decompiling AMD's AutoUpdate software, which AMD declined to fix.

OpenCode Hacked: User credentials leaked(twitter.com)

794 points by pranshuchittora 8 days ago | 145 comments

OpenCode's post on X announcing a security breach tied to a large-scale distillation attack that affected 1.4% of OpenCode Console users.

RCE Vulnerability in React and Next.js(github.com)

559 points by rayhaanj 10 months ago | 214 comments

GitHub security advisory GHSA-9qr9-h5gf-34mp for a critical (CVSS 10.0) remote code execution vulnerability in React Server Components affecting Next.js, with patched versions listed.

Writing secure Go code(jarosz.dev)

342 points by gus_leonel 2 years ago | 259 comments

Blog post by Jakub Jarosz outlining specific practices for writing robust, secure and performant Go code.

It's time to talk about TEEs(alinush.github.io)

13 points by joshcsimmons 8 days ago | 2 comments

A blog post by Alin Tomescu surveying attacks on trusted execution environments (TEEs) and urging developers to reconsider deploying TEE-based applications.

Today's PHP security release, and how we're strengthening security(thephp.foundation)

761 points by ejohnso49 5 days ago | 394 comments

PHP Foundation blog post on a PHP security release fixing two critical RCE vulnerabilities, how they were found, the disclosure leak, and how PHP security work is being strengthened.