NIST Privacy Framework(nist.gov)
100 points by sacrosanct | 40 comments
First screen, captured . Open the video.
Full page
Captured . Click for the whole screenshot.
Looks similar
How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos(research.kudelskisecurity.com)
657 points by spiridow | 219 comments
Kudelski Security research post describing how a pull request to CodeRabbit led to remote code execution and write access to about one million repositories.
Related stories
CuPy: NumPy and SciPy for GPU(github.com)
347 points by tanelpoder | 97 comments
GitHub repository for CuPy, a NumPy- and SciPy-compatible array library for GPU-accelerated computing in Python with CUDA and ROCm support.
Infosec 101 for Activists(infosecforactivists.org)
440 points by greenie_beans | 174 comments
Infosec 101 for Activists is a guide by Drew Bjorn, Mark Sherman, and Blake Skinner on digital security practices for US activists attending protests.
So you want to parse a PDF?(eliot-jones.com)
369 points by UglyToad | 199 comments
Blog post by Eliot Jones explaining how PDF parsing should work per the spec, covering headers, cross-reference tables, object offsets and trailers, and its real-world pitfalls.
Disrupting the first reported AI-orchestrated cyber espionage campaign(anthropic.com)
341 points by koakuma-chan | 261 comments
Anthropic news post describing how it detected and disrupted a cyber espionage campaign largely orchestrated using its Claude AI model, with a linked full report.
The CISA Alert: Security Beyond Solitary Confinement(jnior.com)
5 points by bscloutier | 1 comments
Blog post from INTEG (JNIOR) responding to a CISA alert on Internet-exposed operational technology, proposing lightweight ways to deter malicious automated access to OT controllers.
Io_uring, kTLS and Rust for zero syscall HTTPS server(blog.habets.se)
444 points by guntars | 138 comments
Blog post describing building an HTTPS web server in Rust using io_uring and kernel TLS to avoid system calls on the request path.