Breaking the open web won't stop the bad bots

Policymakers should resist treating anonymity as something wrong in and of itself, argue Lila Bailey and Tess Vartanian.

Binance-hacker-1029 – $5.6B stolen from Binance

Medicare Will Pay $50k for Your Heart Attack. It Should Pay $100 to Prevent It

Azure's Weakest Link – Five Full Cross-Tenant Compromises

In my previous blog posts, Azure’s Weakest Link? and Azure’s Weakest Link - Full Cross-Tenant Compromise, I gave an overview of the severely insecure architecture behind API Connections in Azure, a part of Azure Logic Apps, and an instance of a full cross-tenant compromise using these inherent flaws. Now I am back with some more vulnerabilities in this system, each giving the same primitives to the attacker. In total, the vulnerabilities here netted me a cool $200,000. I also held a talk detailing this at Blue Hat Asia 2026, and when the recordings are out, I will add a link here. TL;DR API Connections allow anyone to fully compromise any other connection worldwide, giving full access to the connected backend. This includes cross-tenant com

Compile-Time Dependent Types

Backdoor in Claude Code for VS Code extension on the Cursor Marketplace

Phorion has detected a backdoor in the official Claude Code for VS Code extension bundle on the Cursor Marketplace that drops a persistent SSH backdoor across macOS, Linux, and Windows. This write-up …

Blockchain intelligence firms link North Korea to $6.3B hack on Binance

The world's biggest cryptocurrency exchange reported Thursday that approximately $6.3 billion was impacted in an apparent hack.

The federated code forge

Pell Puzzles Review

Pell Puzzles scores 86/102: a proper logic puzzle with a rule you can explain in one breath, and that rule ends up guiding most of the solving for you.

Northflank Breached

Northflank Status

Finding Panics with Call Graph Analyzer

A Working Nintendo in ~1GB of Qwen Weights

An NES CPU compiled into the weights of a stock Qwen3.5 model - dbreunig/nesformer

Show HN: Spinf-serve – inference server for bulk scoring and decisions

Bulk classification and decision inference on one GPU: the content is read once, every question about it is scored in the same pass. OpenAI-compatible, Apache 2.0 - spinfinc/spinf-serve

Florilegium: Procedural Flowers in LaTeX

Procedurally generated Delft-blue floral page margins for LuaLaTeX, drawn in Lua - kevinraymond/florilegium

US tech stocks see sharp falls over AI cost fears

Shares in Intel continue to fall while the tech-heavy Nasdaq opens at its lowest level in more than two months.

AI isn't replacing SREs, it's deskilling them

When AI handles 95% of your incident response, do you get worse at handling the 5% that actually matters?

Tracks along the longest drive on another world

Written by Vandi Verma, Chief Engineer for Robotic Operations at NASA's Jet Propulsion Laboratory

Gilgamesh by Simon Armitage review – an ancient epic is brilliantly translated

The poet laureate’s visceral take on the legendary Mesopotamian hero’s wild adventures is a tour de force

Polymarket 1h halt after vendor compromise; affected users will be 'made whole'

Predictions markets platform Polymarket was forced to halt trading on its international platform for an hour after a vendor was compromised.

The $6.3B Binance Hack Was Pulled Off in Just 20 Minutes

Multiple crypto-tracing firms say notorious North Korean hackers TraderTraitor may be behind the largest digital heist in history—with billions of crypto likely gone for good.