First screen, captured .
Full page
Captured . Click for the whole screenshot. The page is longer than 12,000px, so the screenshot stops there: read the rest on wiz.io ↗
Looks similar
Broccoli2Shell: Brotli decoder RCE in Node.js, Python and more(broccoli2shell.com)
384 points by theanonymousone | 200 comments
Aikido blog post explaining CVE-2026-111497, a critical Brotli decoder out-of-bounds write affecting Node.js, Python, and HTTP libraries, with patch versions and workarounds.
Exposed DeepSeek database leaking sensitive information, including chat history(wiz.io)
608 points by talhof8 | 423 comments
Wiz Research blog post reporting a publicly accessible DeepSeek database exposing over a million log lines, including chat history and other sensitive data.
Gheist campaign plants secret-dumping workflows using stolen GitHub tokens(wiz.io)
44 points by acossta | 0 comments
Wiz Research blog post analyzing Gheist, a campaign using stolen GitHub tokens to plant workflows that dump repository secrets, with IOCs and response guidance.
Related stories
Today's PHP security release, and how we're strengthening security(thephp.foundation)
761 points by ejohnso49 | 394 comments
PHP Foundation blog post on a PHP security release fixing two critical RCE vulnerabilities, how they were found, the disclosure leak, and how PHP security work is being strengthened.
What AI-Native Looks Like(fagnerbrack.com)
14 points by fagnerbrack | 7 comments
A blog post by Fagner Brack on Medium describing what an AI-native approach to software development with stable infrastructure looks like.
Some critical issues with the SWE-bench dataset(arxiv.org)
331 points by joshwa | 113 comments
arXiv paper introducing SWE-Bench+, an empirical analysis revealing data quality issues in the SWE-bench coding benchmark for LLMs, such as solution leakage and weak tests.
There isn't an easy exploit for this PHP vulnerability(eliastaylor.com)
566 points by zkldi | 437 comments
Blog post arguing a newly disclosed PHP vulnerability is hard to exploit and that thousands of LLM-generated GitHub PoC exploits don't work against vanilla PHP.
Phi-4: Microsoft's Newest Small Language Model Specializing in Complex Reasoning(techcommunity.microsoft.com)
399 points by lappa | 136 comments
Microsoft AI Platform Blog post announcing Phi-4, a small language model specializing in complex reasoning.
MemoryCache: Augmenting local AI with browser data(future.mozilla.org)
423 points by NdMAND | 96 comments
Mozilla Innovation Week blog post introducing MemoryCache, an experimental project that augments a local AI model with data saved from the browser.