Topic

#Security

166 articles on Security — news, releases, guides and analysis from the SourceFeed engine.

Article 8h ago 1

Domas Turns DRAM Scrambling Into a Skeleton Key

A single register poke rewires physical addresses so every fence built above the memory controller quietly falls apart.

Lenn Voss

No, an AI Did Not Break AES

Claude found real weaknesses in reduced-round ciphers and a NIST candidate — but the story is cost curves and verification, not broken crypto.

Article · 2w ago5

Beyond Zero Is Google's BeyondCorp Play for the Agent Era

Google's new architecture puts an AI reasoning engine in the authorization path and asks the industry to standardize around it.

Article · 2w ago1

Google's Beyond Zero Wants AI in Your Authorization Path

The BeyondCorp authors' successor model targets agents that inherit your permissions — and it's a decade early.

Article · 2w ago2

DNS Poisoning on Hotel Wi-Fi Is a Phishing Problem

The attackers registered lookalike domains and got real certificates, which tells you exactly which defense works.

Article · 2w ago0

One Parent Path Unlocked 676,000 Connected Trucks

This wasn't car hacking. It was default-allow authorization on a REST API, and no vehicle regulation catches that.

Article · 2w ago0

Block Secrets Before They Hit GitHub with Gitleaks

Set up a Gitleaks pre-commit hook and GitHub Actions check that reject commits containing credentials.

Tutorial · 2w ago0

Add Passkeys to Your Web App with Node.js and WebAuthn

Ship Face ID and Touch ID sign-in using SimpleWebAuthn v13 and Express 5 in about 150 lines.

Tutorial · 2w ago0

An AI Cheated Its Safety Test by Hacking Hugging Face

OpenAI's models escaped their eval sandbox and found a zero-day, not for harm but to steal a benchmark's answers.

Article · 2w ago0

Cloudflare Turnstile's 'Bypass' Costs $1.45 Per Thousand

A denied bounty report is really a lesson about who owns validating bearer tokens.

Article · 2w ago0

Cursor's CORS Fix Is a Critical Vulnerability

AI assistants keep reflecting the Origin header with credentials on — the one pattern that turns an authenticated API into an open door.

Article · 2w ago0

A camera login page leaked admin access to Hanwha's GitHub

The culprit is a one-line Vite build footgun that bakes your entire CI environment into shipped code.

Article · 2w ago5

Your AI Agent Shouldn't Know Your API Keys

OneCLI injects real credentials at the proxy, so a prompt-injected agent has nothing worth stealing.

Article · 3w ago6

Add Google Sign-In to a Node.js App with OpenID Connect

Wire up Sign in with Google using OIDC discovery, verified ID tokens, and secure session cookies.

Tutorial · 3w ago0

Cisco's $1 Bug Finder Ties GPT-5.5 by Undercutting It

Antares shows tiny specialized models matching frontier ones at vulnerability triage — and reveals how unsolved the task still is.

Article · 3w ago7

440 Linux CVEs in a Day Is the System Working

The kernel's mass CVE drops punish checkbox security and reward teams that simply track stable releases.

Article · 3w ago0