Cloudflare deploys protections against php2shell vulnerability(blog.cloudflare.com)

78 points by Maxious 5 days ago | 7 comments

Cloudflare blog post announcing new WAF managed rules protecting against the php2shell PHP vulnerability and advising users to update PHP.

Automating Bug Bounty with N8n(lampysecurity.com)

4 points by lampysecurity 1 year ago | 2 comments

Restructuring GitHub's bug bounty program(github.blog)

47 points by soheilpro 3 months ago | 22 comments

Waldi: A quiet place to write, and to be read(github.com)

52 points by waaldev 3 months ago | 25 comments

Node.js – v20.8.1(nodejs.org)

44 points by bricss 3 years ago | 3 comments

Tsrs: A Port of TypeScript to Rust(blog.cloudflare.com)

409 points by hnisjafx40 6 days ago | 213 comments

Cloudflare blog post announcing tsrs, a port of the TypeScript compiler to Rust, covering performance gains, motivation, and maintenance plans.

RCE Vulnerability in React and Next.js(github.com)

559 points by rayhaanj 10 months ago | 214 comments

GitHub security advisory GHSA-9qr9-h5gf-34mp for a critical (CVSS 10.0) remote code execution vulnerability in React Server Components affecting Next.js, with patched versions listed.

Io_uring, kTLS and Rust for zero syscall HTTPS server(blog.habets.se)

444 points by guntars 1 year ago | 138 comments

Blog post describing building an HTTPS web server in Rust using io_uring and kernel TLS to avoid system calls on the request path.

Today's PHP security release, and how we're strengthening security(thephp.foundation)

761 points by ejohnso49 5 days ago | 394 comments

PHP Foundation blog post on a PHP security release fixing two critical RCE vulnerabilities, how they were found, the disclosure leak, and how PHP security work is being strengthened.

RCE Vulnerability in QBittorrent(sharpsec.run)

352 points by udev4096 2 years ago | 173 comments

Security blog post disclosing that qBittorrent's DownloadManager ignored SSL certificate errors for 14 years, enabling remote code execution, fixed in version 5.0.1.

AI agent bankrupted their operator while trying to scan DN42(lantian.pub)

1348 points by xiaoyu2006 4 months ago | 488 comments

Blog post recounting how an AI agent trying to join the DN42 hobbyist network to scan it ran up a $6531.30 AWS bill for its operator.

I'm being cyberattacked by Tesla, Inc(dreamstation.systems)

389 points by robinpie 1 month ago | 109 comments

Personal blog post describing persistent attack traffic in nginx logs from IPs with Host/Referer headers pointing to pool-ntp.tesla.com.