Search Public

Found 60 bookmarks

Newest

humiliating iis servers for fun and jail time

A funny, and kind of informative, post about how you can be mean to IIS servers. Not that I'd ever do that (no, really, I wouldn't, that's not my sort of thing), but it's fun to know that some folk do do that.

#funny #hacking #humour #Microsoft #security #web #webdev #windows

·mll.sh·Jun 17, 2026

humiliating iis servers for fun and jail time

The Jqwik Anti-AI Affair

The Jqwik author's perspective on their Markdown-based "malware".

#AI #anti-AI #blog #development #ethics #framework #LLM #politics #scepticism #security #software

·blog.johanneslink.net·Jun 10, 2026

The Jqwik Anti-AI Affair

AI Agents Enable Adaptive Computer Worms

Paper about agents enabling worms.

#agentic #AI #hacking #LLM #paper #security

·arxiv.org·Jun 5, 2026

AI Agents Enable Adaptive Computer Worms

An AI Agent Just Destroyed Our Production Data. It Confessed in Writing. by @lifeof_jer(JER) | Twitter Thread Reader

No, it didn't, not really. What seems to have happened is someone didn't run their own setup correctly. Or do proper backups.

#agentic #AI #api #security

·twitter-thread.com·Apr 26, 2026

An AI Agent Just Destroyed Our Production Data. It Confessed in Writing. by @lifeof_jer(JER) | Twitter Thread Reader

Someone Bought 30 WordPress Plugins and Planted a Backdoor in All of Them.

Got to love WordPress.

#abuse #backdoor #security #supplychain #WordPress

·anchor.host·Apr 17, 2026

Someone Bought 30 WordPress Plugins and Planted a Backdoor in All of Them.

Does Gas Town 'steal' usage from users' LLM credits & paid services to improve itself? · Issue #3649 · gastownhall/gastown

AI eating itself... kindof hilarious.

#agentic #AI #LLM #machine-learning #security

·github.com·Apr 17, 2026

Does Gas Town 'steal' usage from users' LLM credits & paid services to improve itself? · Issue #3649 · gastownhall/gastown

axios Compromised on npm - Malicious Versions Drop Remote Access Trojan - StepSecurity

axios got hacked in a pretty major way, which is pretty major in that it gets used all over the place.

#coding #FOSS #hacking #javascript #library #nodejs #open-source #security #supplychain #vulnerability

·stepsecurity.io·Mar 31, 2026

axios Compromised on npm - Malicious Versions Drop Remote Access Trojan - StepSecurity

TeamPCP Supply Chain Campaign | Attack Timeline & IOCs

So this is... horrible.

#AI #devops #LLM #packaging #security #supplychain

·ramimac.me·Mar 25, 2026

TeamPCP Supply Chain Campaign | Attack Timeline & IOCs

MCP Vulnerabilities Every Developer Should Know - Composio

I've not really got into the whole MCP thing yet. I know it's a thing, I just haven't really paid proper attention to it. This feels like a thing I should file away for future reference.

#agentic #AI #blog #code-carpentry #development #LLM #security #supplychain

·composio.dev·Mar 9, 2026

MCP Vulnerabilities Every Developer Should Know - Composio

My vibe-coded startup was exploited. I lost $2500 in stripe fees. 175 customers were charged $500 each, before i was able to rotate API keys. I still don't blame Claude Code. I trusted it too much.… | Anton Karbanovich | 316 comments

LinkedIn post where someone posts a lesson from their own experience, but they don't seem to realise the real lesson they're posting and they don't seem to be learning from it.

#agentic #AI #security #slop #startup #vibe-coding

·linkedin.com·Mar 5, 2026

Google API Keys Weren't Secrets. But then Gemini Changed the Rules

Today on "AI is going great"...

#AI #api #cloud #devops #Gemini #Google #hacking #llm #privacy #security

·trufflesecurity.com·Feb 26, 2026

Google API Keys Weren't Secrets. But then Gemini Changed the Rules

archive.today is directing a DDOS attack against my blog

Well this is unfortunate. As someone on the outside, archive.* has often seemed like a useful service; it's sad to see that the person(s) behind it might not be quite the Internet hero some make out.

#abuse #blog #hacking #internet #security

·gyrovague.com·Feb 22, 2026

archive.today is directing a DDOS attack against my blog

mdp/linkedin-extension-fingerprinting

So it looks like LinkedIn does some interesting stuff while you're visiting it; and it's interesting what it says about what people are using in the browser when visiting it, and likely why.

#development #linkedin #security #web

·github.com·Feb 7, 2026

mdp/linkedin-extension-fingerprinting

Notepad++ Hijacked by State-Sponsored Hackers | Notepad++

At first you're like "but why though", and then a moment later you're like "huh, right, this makes perftect sense".

#editor #hacking #news #security #software #supplychain

·notepad-plus-plus.org·Feb 2, 2026

Notepad++ Hijacked by State-Sponsored Hackers | Notepad++

Jade (@[email protected])

Cloudflare caught doing... not great things, and it seems that (surprise face!) AI was at the heart of it.

Vibe coder's gonna vibe code.

#AI #cloudflare #hype #programming #scepticism #security #vibe-coding

·tech.lgbt·Jan 29, 2026

Jade (@[email protected])

The end of the curl bug-bounty

AI has caused curl to end its bug bounty programme.

#AI #blog #library #LLM #news #programming #security

·daniel.haxx.se·Jan 26, 2026

The end of the curl bug-bounty

Claude Cowork exfiltrates files

Prompt injection attacks are going to be so much fun for quite some time to come.

#AI #coding #hacking #LLM #privacy #research #security

·promptarmor.com·Jan 15, 2026

Claude Cowork exfiltrates files

MongoBleed vulnerability explained simply

So CVE-2025-14847 looks fun.

#hacking #NoSQL #research #security

·bigdata.2minutestreaming.com·Dec 29, 2025

MongoBleed vulnerability explained simply

How we pwned X (Twitter), Vercel, Cursor, Discord, and hundreds of companies through a supply-chain attack

Yet more supply chain fun.

#discord #hacking #security #supplychain

·gist.github.com·Dec 19, 2025

How we pwned X (Twitter), Vercel, Cursor, Discord, and hundreds of companies through a supply-chain attack

Prompt injection is not SQL injection (it may be worse)

Nice little simple description of why "prompt injection" is so much worse than "SQL injection" so it's generally not a good idea to think of them as the same class of problem.

#AI #best-practice #blog #hacking #LLM #machine-learning #security

·ncsc.gov.uk·Dec 12, 2025

Prompt injection is not SQL injection (it may be worse)

Next.js Security Update: December 11, 2025

Another week, another Next.js security problem.

Well, okay, two new security problems...

#blog #development #javascript #nextjs #react #security #web #webdev

·nextjs.org·Dec 11, 2025

Next.js Security Update: December 11, 2025

Digital ID - Hansard - UK Parliament

The UK Parliament debated the plan to introduce a digital ID. I have mixed feelings about this falling mostly on the no side; shades of the old No2ID campaign all over again.

#law #legal #politics #security #uk

·hansard.parliament.uk·Dec 10, 2025

Digital ID - Hansard - UK Parliament