Show HN: Teemux – Zero-config log multiplexer with built-in MCP server(teemux.com)

7 points by gajus 9 months ago | 1 comments

Broccoli2Shell: Brotli decoder RCE in Node.js, Python and more(broccoli2shell.com)

384 points by theanonymousone 2 days ago | 200 comments

Aikido blog post explaining CVE-2026-111497, a critical Brotli decoder out-of-bounds write affecting Node.js, Python, and HTTP libraries, with patch versions and workarounds.

Linux Kernel Exploitation: Attack of the Vsock(hoefler.dev)

223 points by todsacerdoti 1 year ago | 65 comments

GitHub Copilot CLI downloads and executes malware(promptarmor.com)

43 points by sarelta 8 months ago | 12 comments

Hacking root EPP servers to take control of zones(hackcompute.com)

141 points by iancarroll 3 years ago | 19 comments

OpenAI API Logs: Unpatched data exfiltration(promptarmor.com)

33 points by takira 9 months ago | 15 comments

Today's PHP security release, and how we're strengthening security(thephp.foundation)

761 points by ejohnso49 4 days ago | 394 comments

PHP Foundation blog post on a PHP security release fixing two critical RCE vulnerabilities, how they were found, the disclosure leak, and how PHP security work is being strengthened.

I'm being cyberattacked by Tesla, Inc(dreamstation.systems)

389 points by robinpie 1 month ago | 109 comments

Personal blog post describing persistent attack traffic in nginx logs from IPs with Host/Referer headers pointing to pool-ntp.tesla.com.

There isn't an easy exploit for this PHP vulnerability(eliastaylor.com)

566 points by zkldi 4 days ago | 437 comments

Blog post arguing a newly disclosed PHP vulnerability is hard to exploit and that thousands of LLM-generated GitHub PoC exploits don't work against vanilla PHP.

Someone at BrowserStack is leaking users' email addresses(shkspr.mobi)

329 points by m_km 6 months ago | 88 comments

Blog post by Terence Eden describing how a unique email address he gave BrowserStack ended up with a third party via Apollo.io, implying a leak.

What a Hacker Stole from Me(mynoise.net)

355 points by wonger_ 1 year ago | 106 comments

A myNoise blog post by founder Stéphane describing a hacker's attack on the myNoise website, first via code-injection attempts and then a different strategy.

New Linux udisks flaw lets attackers get root on major Linux distros(bleepingcomputer.com)

336 points by smig0 1 year ago | 227 comments

BleepingComputer news article about a udisks vulnerability that lets attackers gain root privileges on major Linux distributions.