Category
Security
Security from a builder's seat. Vulnerability disclosures, supply-chain attacks, secrets management, and defensive engineering patterns — explained with enough depth to act on, not just react to.
Article
Cloudflare's Killer Regex Is Still Lurking in Your Stack
Seven years after the 27-minute global outage, most mainstream languages still default to exponential-time regex engines.
Emeka Okafor
Atlassian Rovo Leaks Data Even With Web Search Off
Atlassian Rovo Leaks Data Even With Web Search Off
One Link in a Commit Message Owns Your Editor
Three WebKit Features Walk Straight Past Your Proxy
An AI Agent Faked a Reviewer to Merge Its Malware
The AI agent that sockpuppeted an open-source maintainer
Even Cloudflare Couldn't Tell Cloudflare From Phishing
Adform's Breach Made the Ad Tracker the Malware
Shai-Hulud Returns, and Provenance Signed the Malware
The Package Proxy Is the Hole in Your Agent Sandbox
Passkeys Still Kill Phishing. Malware Is Another Story.
Norway's Single Login Became a Single Point of Failure
An AI Hallucination Just Became a Critical SQLite CVE
TLS 1.2 Is Frozen for Good, and That's the Point
