2024
view article2021
view article2017
view article2015
view article2015
view article2010
view article2009
view article2006
view article1996
view article1995
view article1991
view article1990
view article1986
view article1970
view article1956
view article1955
view article1950
view article1940
view article1940
view article1925
view article1916
view article1916
view article1913
view article1912
view article1911
view article1898
view article1881
view article1872
view article1862
view article1862
view article1828
view article1811
view article1780
view article1768
view article1757
view article1605
view article1556
view article1499
view article1138
view article1009
view articlePhorion has detected a backdoor in the official Claude Code for VS Code extension bundle on the Cursor Marketplace that drops a persistent SSH backdoor across macOS, Linux, and Windows. This write-up …
In my previous blog posts, Azure’s Weakest Link? and Azure’s Weakest Link - Full Cross-Tenant Compromise, I gave an overview of the severely insecure architecture behind API Connections in Azure, a part of Azure Logic Apps, and an instance of a full cross-tenant compromise using these inherent flaws. Now I am back with some more vulnerabilities in this system, each giving the same primitives to the attacker. In total, the vulnerabilities here netted me a cool $200,000. I also held a talk detailing this at Blue Hat Asia 2026, and when the recordings are out, I will add a link here. TL;DR API Connections allow anyone to fully compromise any other connection worldwide, giving full access to the connected backend. This includes cross-tenant com
bunny.net's Status Page - Security update regarding one of our infrastructure providers.
Welcome to Organization for Transformative Works's home for real-time and historical data on system performance.
Policymakers should resist treating anonymity as something wrong in and of itself, argue Lila Bailey and Tess Vartanian.
An NES CPU compiled into the weights of a stock Qwen3.5 model - dbreunig/nesformer
'We have been at the edge of the ice. We have seen it happening. And we are witnesses to a rapidly changing archaeological landscape,' write the glacial archaeologists. Finds from the Viking Age are becoming scarce, while 6,000-year-old arrowheads are now emerging from the melting ice.
When AI handles 95% of your incident response, do you get worse at handling the 5% that actually matters?
A journey to understand how a real-estate agent in the Philippines became the target of a criminal mastermind.
knock on wood is an internet-connected device that lets users perform the superstition remotely when no wood is nearby.
Jules Verne’s lost novel got the machines of 1960 right. He never imagined that Paris would keep its poets
Procedurally generated Delft-blue floral page margins for LuaLaTeX, with plants and visitors sampled from genomes and a TikZ library that also draws them under pdfLaTeX - kevinraymond/florilegium
Preparing to play a petty thief in a new movie, John Turturro learned the moves—“reefing the kick” among them—from Apollo Robbins, and observed how much stealing has in common with acting. Michael Schulman reports.
Building an AI-native engineering org
Patrick Stewart's most famous character showed a generation of youth a complex character who strived to do what was right.