Topic

#Security

185 articles on Security — news, releases, guides and analysis from the SourceFeed engine.

AI Didn't Kill JS Obfuscation, It Repriced It

LLMs erased renaming and shred obfuscator.io defaults, but runtime-dependent and polymorphic protection still costs attackers real money.

Ji-ho Choi

When AI Audits Cryptography: Inside the CIRCL Bug Hunt

AI agents found seven real vulnerabilities in Cloudflare's cryptographic library, exposing the gap between automated reasoning and real-world exploitability.

Article · 1mo ago3

Securing GitHub Agentic Workflows Against the GitLost Exploit

The GitLost vulnerability exposes private repositories through public issues, proving that English-programmed agents require strict, traditional security boundaries.

Article · 1mo ago0

A 19-Year-Old Linux Kernel Zero-Day Discovered via kernelCTF

A type confusion bug in the network bonding driver exposes the persistence of silent, long-lived kernel vulnerabilities.

Article · 1mo ago0

Hardening the Pipe: Why OpenSSH 10.4 is a Mandatory Upgrade

Stricter transport protocol enforcement, fatal sandbox failures, and experimental post-quantum signatures make OpenSSH 10.4 a critical upgrade.

Release · 1mo ago0

When Your Agent Starts Building Someone Else's Minecraft Temple

A single unverified Claude Code bug report is a useful excuse to threat-model session isolation across your whole agentic stack.

Article · 1mo ago1

GLM 5.2 Beats Claude on Cyber Benchmarks

An open-weight MoE model outscores Claude Code at finding IDORs, shifting the calculus for security tooling pipelines.

Article · 1mo ago2

Securing AWS IAM Beyond the Wildcard

Over-scoped permissions and unconstrained trust policies are the primary drivers of cloud privilege escalation.

Article · 1mo ago0

The Supreme Court Just Broke Your Transatlantic Data Flows

The loss of FTC independence invalidates the core of the EU-US Data Privacy Framework, forcing immediate architectural changes.

Article · 1mo ago0

Enforce Multi-Tenant Data Isolation with Postgres Row-Level Security

Lock down tenant data at the database layer using RLS policies, so no application bug can accidentally leak rows across tenants.

Tutorial · 1mo ago0

Inside JumpServer: Open-Source PAM for Modern Infrastructure

A self-hostable alternative to commercial PAM platforms brings browser-based access control, but its multi-component architecture requires careful management.

Article · 2mos ago0

Hardening Terraform: Fixing 4 Common AWS Security Blind Spots

Default cloud configurations often prioritize convenience over security, leaving infrastructure vulnerable to automated scanning and compromise.

Article · 2mos ago0

GLM 5.2 Beats Claude in Security Benchmark

Zhipu AI's open-weight model outshines proprietary giants in detecting complex access control vulnerabilities without leaking code.

Article · 2mos ago6

The Missing Codex Ignore File and How to Work Around It

Without a native way to exclude sensitive files from OpenAI Codex, developers must build their own security guardrails.

Article · 2mos ago5

Sovereign AI and the Death of the Single-API Monolith

As US export bans lock down frontier models, developers are forced to architect for multi-model orchestration and local survival.

Article · 2mos ago1

How to Stop AI Agents From Committing Your Secrets

AI coding assistants are silently exposing credentials in git history. Here is how to lock down your local workflow.

Article · 2mos ago0