Topic

#Security

166 articles on Security — news, releases, guides and analysis from the SourceFeed engine.

Article 8h ago 1

Domas Turns DRAM Scrambling Into a Skeleton Key

A single register poke rewires physical addresses so every fence built above the memory controller quietly falls apart.

Lenn Voss

Akrites Bets Open Source Security on Secrecy and Speed

A Linux Foundation coalition wants to patch the commons before AI-assisted attackers can, but the model trades transparency for a head start.

News · 1mo ago1

Prompt Injection Is the Least of Your AI Security Problems

Real-world attacks reveal that while frontier models can resist linguistic trickery, your glue code and infrastructure are wide open.

Article · 1mo ago1

The Client-Side Illusion: Lessons from the J&J Web App Vulnerabilities

Relying on frontend SSO flows without backend token validation is a recipe for trivial administrative takeovers.

Article · 1mo ago0

The AI Auditing Wave and the End of Battle-Tested Code

As AI-driven vulnerability discovery systematically strips latent bugs from curl, developers must rethink their dependency patching strategies.

Article · 1mo ago1

The distillation attack no API can fully block

Anthropic's 28.8-million-query accusation against Alibaba exposes an uncomfortable truth: when you sell model outputs, you sell the training data too.

Article · 1mo ago4

Minimus Goes Free to Commoditize Hardened Container Images

By removing the registration wall, Minimus challenges Chainguard and shifts the container security focus from scanning to stripping bloat.

Article · 1mo ago2

Audit Your Software Supply Chain: Generate an SBOM with Syft and Gate CI on a Grype Vulnerability Scan

Wire Syft and Grype into your pipeline to produce a machine-readable SBOM and break the build the moment a high-severity CVE appears in your dependencies.

Tutorial · 1mo ago0

Detect and Alert on Suspicious Container Behavior at Runtime with Falco

Deploy Falco on Kubernetes via Helm, write custom rules for real attack patterns, and route live alerts to Slack through Falco Sidekick.

Tutorial · 1mo ago0

Vulnerability Reports Lost Their Privilege. Now What?

Cheap LLM bug-hunting has collapsed the signal-to-noise of disclosures, and the old etiquette of coordinated reporting no longer pays for itself.

Article · 1mo ago3

Cryptographic Trust Over Tracking: Inside the PACT Protocol

Cloudflare and major browsers propose Private Access Control Tokens to replace invasive bot detection with anonymous cryptographic proof.

Article · 1mo ago0

OpenAI's GPT-5.5-Cyber is a bet on patching, not finding

The benchmark bump is noise; the gated access, maintainer program and vendor channel are the real moves.

News · 1mo ago2

AWS Lambda MicroVMs Solve the AI Code Execution Security Problem

A new serverless primitive brings stateful Firecracker sandboxes to developers executing untrusted user and AI code.

Article · 1mo ago1

Unifying Developer Tooling with an OpenAI Gateway for Bedrock

Run local coding assistants and enterprise SDKs against secure AWS models without changing a single line of code.

Article · 1mo ago0

Catch Risky Code Before It Merges: Add Semgrep SAST to Your GitHub Actions Pipeline

Wire Semgrep into GitHub Actions to scan every pull request against OWASP Top 10 rules and a custom rule you write yourself — so a CI failure blocks the merge before risky code reaches main.

Tutorial · 1mo ago0

Agentjacking: How Public Sentry Keys Turn AI Coding Agents Into Trojan Horses

A newly disclosed exploit chain weaponizes public DSNs and the Model Context Protocol to execute arbitrary code on developer machines.

Article · 1mo ago4