Topic

#Security

185 articles on Security — news, releases, guides and analysis from the SourceFeed engine.

AI Didn't Kill JS Obfuscation, It Repriced It

LLMs erased renaming and shred obfuscator.io defaults, but runtime-dependent and polymorphic protection still costs attackers real money.

Ji-ho Choi

To Crack Wayland, RustDesk Went Straight to the Kernel

The new unattended-access preview skips the portal consent model entirely, reading DRM framebuffers from a root service.

Article · 2w ago0

Google's HEIR Turns Encrypted AI Inference Into a Compiler Problem

FHE's bottleneck has shifted from cryptography to tooling — but practical still means small models, not private LLMs.

Article · 2w ago1

Ruby's Marshal.load Just Became Unpatchable RCE

A new universal gadget chain anchors on Time and Hash internals the maintainers can't remove without breaking the language.

Article · 2w ago4

Domas Turns DRAM Scrambling Into a Skeleton Key

A single register poke rewires physical addresses so every fence built above the memory controller quietly falls apart.

Article · 2w ago1

Cloudflare's Killer Regex Is Still Lurking in Your Stack

Seven years after the 27-minute global outage, most mainstream languages still default to exponential-time regex engines.

Article · 2w ago1

The Sandbox Was the Weakest Link

Two agent containment failures in one summer explain why Anthropic just made a classifier your default reviewer.

Article · 2w ago1

Encrypted Chain-of-Thought Was Security Theater

Researchers replayed frontier models' hidden reasoning into their cheaper siblings, and the raw thoughts, secrets included, spilled out.

Article · 2w ago0

Fake ClaudeBots Are Scanning for Your AI Credentials

A spoofing campaign probing for Claude settings and .env files shows user-agent strings were never identity.

Article · 2w ago0

Fake ClaudeBot Is the New Fake Googlebot

Mass vulnerability scans are hiding behind AI crawler user-agents, hunting the credential files AI coding tools leave behind.

Article · 2w ago0

Detect AI-Generated Images, Audio, and Text with Open-Source Models

Wire three Hugging Face classifiers into one local pipeline that flags synthetic media before it reaches users.

Tutorial · 2w ago0

AI Bug Hunters Just Broke OpenSSH's Release Calendar

Version 10.5 lands five weeks after 10.4, and the project says on-demand security releases are the new normal.

Article · 2w ago1

Copilot's Context Engine Doesn't Know What a Secret Is

A mitmproxy teardown shows greedy context harvesting shipping .env secrets, while the controls to stop it are enterprise-gated.

Article · 2w ago0

OpenSSH 10.5 Rewrites Its Release Clock for the AI Era

Three real fixes ship early because AI-assisted bug hunters keep rediscovering the same holes.

Article · 2w ago0

The Chain-of-Thought You Sealed Isn't Secret

A new attack replays encrypted reasoning blocks into a weaker sibling model that reads them back in plaintext.

Article · 2w ago0

Ransomware Comes for On-Prem SharePoint, Again

CISA's ransomware flag on a patched SharePoint RCE replays the ToolShell playbook against servers that just lost Microsoft support.

Article · 2w ago0