Looks similar
Trivy Security incident 2026-03-19(github.com)
10 points by l2dy | 1 comments
Incident CVE-2026-LGTM(nesbitt.io)
484 points by mooreds | 82 comments
Andrew Nesbitt's satirical incident report about a malicious package slipping past seven AI-powered security gates in a fictional future CVE.
Zod 4(zod.dev)
725 points by bpierre | 225 comments
Release announcement page for Zod 4, the TypeScript schema validation library, describing performance improvements, new features, and upgrade instructions.
Related stories
The Vercel breach: OAuth attack exposes risk in platform environment variables(trendmicro.com)
356 points by queenelvis | 116 comments
Trend Micro research article analyzing the April 2026 Vercel breach, an OAuth supply chain compromise exposing risks of platform environment variables.
Node.js Vulnerability Blog(nodejs.org)
6 points by Brysonbw | 1 comments
The Node.js blog's Vulnerabilities category page, listing 2026 security release announcements, an OpenSSL advisory assessment, and a V8 HashDoS post.
Anthropic’s paper smells like bullshit(djnn.sh)
1070 points by vxvxvx | 300 comments
Blog post criticizing Anthropic's report on disrupting an AI-orchestrated cyber espionage campaign; the captured page shows a Cloudflare block screen.
Vercel says internal systems hit in breach(decipher.sc)
352 points by whiteyford | 97 comments
Decipher news article reporting that cloud platform Vercel disclosed a breach affecting its internal systems.
Vulnerability reports are not special anymore(words.filippo.io)
358 points by goranmoomin | 204 comments
Blog post by Filippo Valsorda arguing that vulnerability reports no longer deserve special treatment from open source maintainers.
Cyber Security: A pre-war reality check(berthub.eu)
446 points by edent | 199 comments
Bert Hubert's lightly edited transcript of his talk at the ACCSS/NCSC/Surf 'Cyber Security and Society' seminar on cybersecurity preparedness ahead of potential war.












