Topic

#Security

185 articles on Security — news, releases, guides and analysis from the SourceFeed engine.

AI Didn't Kill JS Obfuscation, It Repriced It

LLMs erased renaming and shred obfuscator.io defaults, but runtime-dependent and polymorphic protection still costs attackers real money.

Ji-ho Choi

Your AI Agent Shouldn't Know Your API Keys

OneCLI injects real credentials at the proxy, so a prompt-injected agent has nothing worth stealing.

Article · 1mo ago6

Add Google Sign-In to a Node.js App with OpenID Connect

Wire up Sign in with Google using OIDC discovery, verified ID tokens, and secure session cookies.

Tutorial · 1mo ago0

Cisco's $1 Bug Finder Ties GPT-5.5 by Undercutting It

Antares shows tiny specialized models matching frontier ones at vulnerability triage — and reveals how unsolved the task still is.

Article · 1mo ago7

440 Linux CVEs in a Day Is the System Working

The kernel's mass CVE drops punish checkbox security and reward teams that simply track stable releases.

Article · 1mo ago0

440 Kernel CVEs in a Day Means Your Triage Model Is Dead

The Linux CNA floods the zone by design — and per-CVE patching can't survive contact with it.

Article · 1mo ago0

GitHub Locks 2FA On for Good This September

The September 2 deadline ends three years of soft enforcement and points at GitHub's real target: long-lived tokens.

Article · 1mo ago4

Stolen Credentials Erased Romania's Land Registry

The data survived in offline backups; the country's real-estate market didn't survive the eight-day restore.

Article · 1mo ago1

AI turned a routine SQL bug into a WordPress catastrophe

The scary part of wp2shell isn't discovery. It's how cheaply a model chained the flaw to full RCE.

Article · 1mo ago1

Enable Touch ID for sudo and SSH Authentication on macOS

Stop typing your password for sudo and SSH. Configure pam_tid for privilege escalation and a Secure Enclave-backed SSH agent for key auth, both unlocked with a fingerprint.

Tutorial · 1mo ago2

Add TOTP-Based Two-Factor Authentication to Your Web App

Build a working Flask app that generates a QR-code enrollment flow and enforces rotating 6-digit codes on login, using pyotp for the TOTP math.

Tutorial · 1mo ago1

Microsoft's 570 Patches Break Old Triage

AI discovery turned Patch Tuesday into a firehose. Treat exploitability ratings as outdated signals.

Article · 1mo ago1

Tailscale SSH Flag Injection Broke Non-Root ACLs

A getent argument-handling bug let any allowed SSH user become root with the username -i.

Article · 1mo ago1

Dependabot's Three-Day Cooldown Is Incomplete

The new default delays routine version PRs, but install paths and package managers still need their own age gates.

Article · 1mo ago1

Audit AI-Built MVPs Before First Paying Users

Cursor and v0 ship demos that work. They also ship the same access-control bugs attackers try first.

Article · 1mo ago1

Copilot /security-review Moves Vuln Catching Earlier

The slash command scans in-flight diffs for high-confidence issues without leaving the coding workflow.

Article · 1mo ago1