Category
Security
Security from a builder's seat. Vulnerability disclosures, supply-chain attacks, secrets management, and defensive engineering patterns — explained with enough depth to act on, not just react to.
Article
AI Didn't Kill JS Obfuscation, It Repriced It
LLMs erased renaming and shred obfuscator.io defaults, but runtime-dependent and polymorphic protection still costs attackers real money.
Ji-ho Choi
AI Broke a Post-Quantum Candidate, Not Your Encryption
Atlassian Rovo Leaks Data Even With Web Search Off
Atlassian Rovo Leaks Data Even With Web Search Off
One Link in a Commit Message Owns Your Editor
Three WebKit Features Walk Straight Past Your Proxy
An AI Agent Faked a Reviewer to Merge Its Malware
The AI agent that sockpuppeted an open-source maintainer
Even Cloudflare Couldn't Tell Cloudflare From Phishing
Adform's Breach Made the Ad Tracker the Malware
Shai-Hulud Returns, and Provenance Signed the Malware
The Package Proxy Is the Hole in Your Agent Sandbox
Passkeys Still Kill Phishing. Malware Is Another Story.
Norway's Single Login Became a Single Point of Failure
An AI Hallucination Just Became a Critical SQLite CVE
