» Tag

vulnerabilities

42 posts

Jul 20, 20268.51
Why Node.js Can't Be Hardened Against Prototype Pollution
Node.js security reports on prototype pollution gadgets are symptoms, not bugs. The real fix belongs at the application boundary, not in core.
javascript nodejs prototype-pollution security
Jul 15, 20268.40
Microsoft's AI Bug Hunt Tripled CVEs: The Data Behind It
Microsoft's July 2026 patch hit 1150 CVEs, 3x the prior baseline. Public CVRF data reveals how AI-driven bug hunting also reshaped severity.
ai cve microsoft security
Aug 11, 20267.90
Stealing Reasoning Traces from Proprietary LLM APIs
We found a way to extract reasoning traces from frontier AI APIs, highlighting significant security risks and potential data leaks for engineers.
ai data_leaks llm security
Ad
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.com
Jul 28, 20267.90
Microsoft and Wiz's bug hunters detect over 90% of vulnerabilities
Microsoft and Wiz have developed AI systems for detecting software vulnerabilities. MDASH and Atlas stand out with their high success rates.
ai microsoft security software
Jul 14, 20267.90
Audit a Cursor or v0-Built MVP Before You Launch
A guide to auditing security vulnerabilities in AI-assisted MVPs before launch.
ai coding mvp security
Aug 16, 20267.80
We hired a security engineer and got back 123 findings
Profullstack's security audit revealed 123 findings across two repositories, offering vital lessons for engineers.
audit database engineering postgres
Aug 14, 20267.80
Hunt NGINX Proxies with Damn Vulnerable NGINX Proxy
Damn Vulnerable NGINX Proxy provides a resource for discovering vulnerabilities in NGINX servers.
bugbounty nginx pentesting security
Aug 11, 20267.83
Malicious SIM Cards Can Shut Down Phones and Steal Files
Malicious SIM cards can shut down phones and steal files, revealing serious security risks. Researchers highlight vulnerabilities in cellular devices.
mobile research security sim
Aug 7, 20267.80
New TONTOU CPU Attack Bypasses Spectre v2 Fixes, Leaks Linux Passwords
Researchers developed an exploit that bypasses Spectre v2 mitigations to leak password hashes from Linux systems.
cpu linux research security
Jul 27, 20267.80
Lovable Uses AI Hacking Agents to Identify Security Vulnerabilities
Lovable implements AI agents to discover security vulnerabilities innovatively.
ai appsec research security