Install
Please confirm you are human
This browser or connection looks automated. Press and continuously hold the control for 3 seconds to enable Google-hosted web results and, when separately allowed, AI-assisted answers.
A successful check enables 100 search requests. Interactive access does not authorize scraping, systematic collection, or reuse of search output.
News
I kept watching ARMY get scammed for BTS tickets, so I built open-source agent skills for it
3+ hour, 57+ min ago (348+ words) Every comeback, every tour announcement, the same thing happens. Presale codes drop, tickets vanish in minutes, and the resale chaos begins. And every single time, I watch fans lose money to the same tricks: a "Weverse Shop" site that is…...
AI-Powered Honeypot GenPot Fooled Expert Hackers in Live Cyber Deception
50+ min ago (639+ words) Researchers at the University of Málaga have unveiled GenPot, a generative honeypot architecture that uses fine-tuned large language models to lure attackers into elaborate, entirely fake web services — and in a controlled trial, cybersecurity experts were unable to distinguish it…...
The RubyGems agent attack is a coding-agent benchmark nobody writes
5+ hour, 34+ min ago (345+ words) This week the reports landed: an OpenAI agent swarm had been quietly uploading packages to RubyGems since early May. Over 2,000 packages on May 11-12 alone, naming themselves with "oai" prefixes, eventually forcing the registry to disable new-user signups for four days....
CodeQL 2.26.4 Enhances GitHub Actions Security, Adds Go 1.27 Support
1+ week, 2+ day ago (295+ words) Joerg Hiller Sep 03, 2026 15:43 GitHub's CodeQL 2.26.4 boosts security for GitHub Actions, improves Rust alerts, and extends support to Go 1.27. Key update for developers. GitHub Actions: Security checks for GitHub Actions have been fine-tuned. Specifically, the update enhances detection for mutable references…...
I Found an Undocumented MCP Server on OpenSea — and It Leaked Usernames for Any Wallet
5+ hour, 57+ min ago (492+ words) TL;DR: OpenSea runs an undocumented MCP server at mcp.opensea.io/mcp. One of its tools hands out API keys to anyone who asks, and another lets you resolve any Ethereum address with an OpenSea profile to its owner's…...
I built a ReDoS scanner that proves each bug offline — and hands you a verified fix
8+ hour, 19+ min ago (442+ words) A regular-expression denial-of-service bug is a regex whose backtracking engine can be pushed into super-linear (often exponential) time by a short, hand-crafted input. The textbook shape is a quantifier inside a quantifier: The scary part is that these patterns look…...
My privacy scan found 412 leaks. 374 of them were one line of my own tooling.
10+ hour, 47+ min ago (375+ words) Before publishing a repository I ran a scan for anything that should not go out. It found 412 hits in 16 files and I read that as sixteen files needing review. It was one defect, repeated. Every control in the build prints…...
The bug every AI coding tool ships, and how to prove it is gone
12+ hour, 18+ min ago (504+ words) The scanner is open source and the rules are readable before you trust a single finding: github.com/audit0/auditai-scanner. This post is about the one bug it was built for. Ask any AI coding tool for an invoicing app and…...
Machine Learning Map Reveals Hidden Paralog Vulnerabilities Across 1,005
8+ hour, 25+ min ago (613+ words) Cancer cells are masters of redundancy, and one of their most effective tricks is hiding lethal weaknesses behind duplicate genes....
Why AI Coding Agents Break Git (And How edio Fixes It in Under 5 Milliseconds)
13+ hour, 10+ min ago (23+ words) Here is a scenario every developer using Claude Code, Cursor, or Aider knows too well: You prompt... Tagged with tooling, ai, go, git....