PSA: Libxslt is unmaintained and has 5 unpatched security bugs(vuxml.freebsd.org)

121 points by burnt-resistor 1 year ago | 71 comments

ASCII and Unicode quotation marks (2007)(cl.cam.ac.uk)

29 points by exvi 7 months ago | 17 comments

Incident CVE-2026-LGTM(nesbitt.io)

484 points by mooreds 4 months ago | 82 comments

Andrew Nesbitt's satirical incident report about a malicious package slipping past seven AI-powered security gates in a fictional future CVE.

Incident Report: CVE-2024-YIKES(nesbitt.io)

658 points by miniBill 5 months ago | 156 comments

A satirical incident report by Andrew Nesbitt about a cascading software supply chain attack spanning JavaScript, Rust, and Python package ecosystems.

Security issues discovered in sudo-rs(lists.debian.org)

7 points by kahlonel 11 months ago | 3 comments

The Messaging Layer Security (MLS) Protocol(datatracker.ietf.org)

139 points by pieter_mj 3 years ago | 56 comments

Qwen3-Coder writes less secure code when told it's for a US persona(hirundo.io)

224 points by mattifrank 5 days ago | 118 comments

Hirundo blog case study claiming Qwen3-Coder produces more vulnerable code for customers framed as Beijing's adversaries, and describing a 'westernization' fix.

TikTok says it is restoring service for U.S. users(nbcnews.com)

714 points by Leary 1 year ago | 2270 comments

NBC News article reporting that TikTok began restoring service for U.S. users after President-elect Trump gave assurances to its service providers.

Inside the "3 billion people" national public data breach(troyhunt.com)

540 points by bubblehack3r 2 years ago | 358 comments

Troy Hunt's blog post analyzing the National Public Data breach, which was claimed to expose records on 3 billion people.

RCE Vulnerability in React and Next.js(github.com)

559 points by rayhaanj 10 months ago | 214 comments

GitHub security advisory GHSA-9qr9-h5gf-34mp for a critical (CVSS 10.0) remote code execution vulnerability in React Server Components affecting Next.js, with patched versions listed.

Today's PHP security release, and how we're strengthening security(thephp.foundation)

761 points by ejohnso49 5 days ago | 394 comments

PHP Foundation blog post on a PHP security release fixing two critical RCE vulnerabilities, how they were found, the disclosure leak, and how PHP security work is being strengthened.

Browser extensions are underrated: the promise of hackable software (2019)(geoffreylitt.com)

552 points by mufty 2 years ago | 275 comments

A 2019 blog post by Geoffrey Litt arguing that browser extensions are underrated as a way for users to customize and modify the software they use.