Sleepwalker: Passive Backdoor with Its Own Command Language (r136a1.dev)

Screenshot of r136a1.dev: Sleepwalker: Passive Backdoor with Its Own Command Language

First screen, captured 1 month ago.

Looks similar

Screenshot of anil.recoil.org: Just the rumour of a bug is enough to find an exploit these days

Just the rumour of a bug is enough to find an exploit these days (anil.recoil.org)

370 points by avsm 1 month ago | 117 comments

Blog post by Anil Madhavapeddy on how AI agents can find exploits from just the rumour of a bug, after a cohttp path traversal fix, and how OSS security disclosure must change.

ocaml cohttp vulnerability-disclosure security-embargoes

Screenshot of johncodes.com: All your OpenCodes belong to us

All your OpenCodes belong to us (johncodes.com)

33 points by jpmcb 9 months ago | 7 comments

Screenshot of alexdowad.github.io: Peering into the Linux Kernel with Trace

Peering into the Linux Kernel with Trace (alexdowad.github.io)

57 points by mre 1 year ago | 3 comments

Screenshot of whynothugo.nl: Wlhc: Wayland Hot Corners

Wlhc: Wayland Hot Corners (whynothugo.nl)

23 points by goranmoomin 2 years ago | 0 comments

Screenshot of bmitch.net: Ghrc.io appears to be malicious

Ghrc.io appears to be malicious (bmitch.net)

352 points by todsacerdoti 1 year ago | 58 comments

Blog post by Brandon Mitchell reporting that ghrc.io, a typo of GitHub's ghcr.io container registry, appears to steal GitHub credentials.

typosquatting ghcr container-registry github

Screenshot of devansh.bearblog.dev: AI Slop vs. OSS Security

AI Slop vs. OSS Security (devansh.bearblog.dev)

161 points by mooreds 11 months ago | 95 comments

Looks similar

Just the rumour of a bug is enough to find an exploit these days(anil.recoil.org)

All your OpenCodes belong to us(johncodes.com)

Peering into the Linux Kernel with Trace(alexdowad.github.io)

Wlhc: Wayland Hot Corners(whynothugo.nl)

Ghrc.io appears to be malicious(bmitch.net)

AI Slop vs. OSS Security(devansh.bearblog.dev)