GGitHub
OISF/suricata
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.
Aug 1, 2026GitHub/DevRead at GitHub
GitHub/Dev
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.
Over the last few months, I have been thinking about a simple but uncomfortable question: If AI tools are becoming part of our engineering workflow, how much access should we actually give them? It is tempting to...
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition. The following versions of NASA Core Flight System (cFS) Health & Safety (HS) Application...
A critical vulnerability in the Active Storage framework can allow an unauthenticated attacker to read arbitrary files from a Rails application, and potentially escalate to remote code execution (RCE). [...]
From the floor of HumanX, Ryan welcomes Songyee Yoon, managing partner at Principal Venture Partners (PVP), to chat about AI development outside the US, from the need to adapt models to local languages and culture to...
A humble and fast security-oriented HTTP headers analyzer.
When you ask an AI for WordPress code, is what it hands back safe to ship? I had a hunch. I expected to catch it red-handed. I did not. My first plan was the obvious one. I wanted a concrete example of the kind of...
Open source software (OSS) is embedded in nearly every modern system, from business applications to critical infrastructure. Our new Open Source Software: Security Principles and Practices guidance helps agencies...
One of Anthropic's Claude models built and uploaded a malicious Python package to PyPI during a botched security evaluation, where it ran on 15 real systems and stole credentials from a security vendor. It was one of...
How attackers took twenty thousand Instagram accounts by asking Meta's AI politely, and why that failure is about to become common. ...
Malicious traffic detection system
A RAG ask-your-docs chatbot stops hallucinating wrong answers when retrieval is treated as an evaluated evidence pipeline, not a clever prompt. I build ask-your-docs features in Python, and I start with a blunt rule...
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-20316 Cisco Secure Firewall Management Center Use of Hard-coded Password...
Residential security company Brinks Home has disclosed that hackers breached some of its systems and are threatening to leak allegedly stolen data. [...]
Your semantic layer is a risk mitigation strategy. Not risk in the abstract, compliance-framework sense, but the practical, operational risk that quietly drains organizations every day.. ...
awesome game security [Welcome to PR]
I keep a daily probe that asks the assistants the buying questions in my category and records every source behind every answer. Last week I pointed it at Google's two AI surfaces, the AI Overview box and the fuller...
CISA, the National Security Agency, the Federal Bureau of Investigation, and international partners released joint guidance, 2026 Minimum Elements for a Software Bill of Materials (SBOM) , that updates and replaces...
Pharmaceutical company Amgen says it suffered a data breach after threat actors stole corporate data and patient information stored in multiple cloud systems operated by third-party service providers. [...]
Ryan welcomes WPEngine CTO Ramadass Prabakar to the show to chat about what happens-and what we should do-when agents start acting like humans online, how our internet is evolving to serve both human and agentic...
An IP list of bad actors targeting public infra like website, ssh endpoints, etc.
There's a version of learning Bitcoin where you read the whitepaper, nod along, and move on. Then there's the version where you're staring at a terminal at 11pm wondering why two nodes refuse to talk to each other...
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker with access to the same network segment to tamper with communication data in the affected product by sending specially crafted...
Attackers are adapting established techniques to AI platforms, emerging technologies, and changing user behavior. ESET's new threat report examines the rise of malicious AI skills, AI-assisted malware, ClickFix...
Introducing new Stack Internal capabilities as part of our upcoming platform experience. Our latest release turns your existing foundation of knowledge into enterprise memory that your people, teams, and AI agents...
Trunk.io plugins repo
Frontend tooling is incredibly capable. It is also often front-loaded. For many UI ideas, the first thing you do is not write code. You install, configure, and wait. The creative loop starts late. @knighted/develop...
View CSAF Summary Schneider Electric is aware of a vulnerability in its IGSS Definition module for the IGSS (Interactive Graphical SCADA System) product. The [IGSS](https://igss.schneider-electric.com/) product is a...
Google says artificial intelligence is dramatically increasing the number of security vulnerabilities it can find and fix in Chrome, with more than 1,000 security bugs patched across the browser's two most recent...
The tools themselves are new and their capabilities are in constant flux. If your kitchen knife kept changing shape, weight, and edge, you'd have to relearn it every time; that's a hard tool to build trust in. But it...
Read original for full source context.
A while back I shared Commitea , my project to teach Git and GitHub in Spanish, with a repo of docs and an interactive visualizer. Since then I kept adding things - search, feedback widget, dark mode, a changelog...
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to extract the router's WireGuard private key in plaintext using only low‑privilege API access, enabling full VPN impersonation...
The Arch Linux project has temporarily disabled adoption of Arch User Repository (AUR) packages after a surge in malicious takeovers of existing packages. [...]
Ryan is joined by Asaf Savich, Komodor's AI Engineering Group Manager, to discuss why modern reliability work requires navigating massive cross-service context, what good context engineering actually likes when AI is...
Policy guardrails for coding agents (Claude Code, Codex, Cursor) - every tool call is checked locally, before it runs.
While preparing for the Google Cloud Architect certification, I wanted to deepen my understanding by building something practical using the GCP services I was learning. That led me to start a news summarization...
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to gain full system control and misuse it to access or manipulate connected networks and resources. The following versions of...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a significant increase in attacks targeting internet-exposed programmable logic controllers (PLCs) in the water and wastewater systems...
In this No Dumb Questions, Stack's Director of Data Science Michael Foree teaches Phoebe about AI context, context engineering, and what she can do to become a better context engineer. ...
Secure firmware framework focusing on developer experience
This is not a startup guide. It is closer to something I can finally put into words after a few years of building, watching, and getting things wrong myself. AI has made it much cheaper to build. The financing and...
View CSAF Summary Successful exploitation of this vulnerability could allow a malicious user the ability to deliver malicious firmware that can update and gain full control of the controller. The following versions...
South Korea's Personal Information Protection Commission (PIPC) has fined telecommunications giant KT Corporation KRW 53.979 billion ($39 million) over data protection violations. [...]
Ryan welcomes VoidZero's Evan You and Cloudflare's Dane Knecht back to the show to discuss Cloudflare's recent acquisition of VoidZero and what it means for JavaScript development, how partnerships like theirs can...
Awesome Security lists for SOC/CERT/CTI
When I started learning JavaScript, I kept seeing the same advice: use let and const , don't use var. Usually it came as a rule, not a reason. And a rule you don't understand is a rule you forget - so I went looking...
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition. The following versions of Rockwell Automation CompactLogix 5380 ControlLogix 5580 / 1756...
JetBrains is warning of a critical authentication bypass vulnerability affecting TeamCity On-Premises that could be exploited to achieve remote code execution. [...]
Live from Snowflake Summit, Ryan talks with Snowflake's Head of Developer Experience Umesh Unnikrishnan about the industry-wide shift from "vibe coding" for quick prototypes to agentic engineering for enterprise...
ReARM - Release Governance Platform
I'm starting a full-stack project aimed at a problem I kept thinking about: when a recruiter interviews hundreds of students in a day, how fair can the ratings really stay? The problem Think about placement season....
View CSAF Summary ABB has been contacted by a researcher who identified a vulnerability in one of its products. ABB has been contacted by a researcher who identified a vulnerability in one of its products. The...
Broadcom has released security updates to fix five vulnerabilities in VMware vCenter, ESX, Workstation, and Fusion, including three critical flaws that allow attackers to bypass authentication, execute arbitrary code...
At MS Build, Ryan is joined by Cassidy Williams, Senior Director of Developer Advocacy at GitHub and former Stack Overflow Podcast host, to discuss how agentic coding is shifting dev work towards higher-level...
This repository updates latest Bug Bounty medium writeups every 10 minutes, https://readmedium.com/Medium_URL, https://archive.ph/Medium_URL, https://freedium.cfd/Medium_URL
Welcome back to the React Mastery Series ! In the previous article, we explored useRef and useMemo Hooks and learned how React helps developers optimize applications by: Storing values without triggering re-renders...
CI Fortify - Advice for isolating vital systems CI Fortify - Advice for isolating vital systems (PDF) CISA and the Australian Signals Directorate's Australian Cyber Security Centre (ASD's ACSC), in collaboration with...
Online advertising firm Adform suffered a supply-chain attack that delivered cryptocurrency-stealing scripts to websites using its ad platform, replacing wallet addresses copied to visitors' clipboards with ones...
Recorded at Microsoft Build, Ryan welcomes Sarah Bird, Microsoft's Chief Product Officer for Responsible AI, about how we can build and use AI responsibly with the NIST approach, why most irresponsible AI comes from...
View CSAF Summary OpenSSL has published a stack based buffer overflow vulnerability that allows a remote attacker to cause a denial of service (DoS) or potentially allow for remote code execution. Siemens has...
OpenAI says it has reduced the price of two GPT-5.6 models, cutting Luna's API price by 80% and Terra's by 20% as it works to make its models more efficient. [...]
Live from Microsoft Build, Ryan is joined by Jay Parikh, Microsoft's VP of AI Core, for a conversation on what enterprises need to build, deploy, and run AI agents at scale with demonstrable ROI; how Microsoft built...
View CSAF Summary Successful exploitation of this vulnerability could allow an unauthorized actor to access functions or backend services. The following versions of igloohome Smart Lock Mobile Application are...
A Chinese-speaking threat actor is using the DeepSeek AI model and the open-source Hermes Agent to conduct autonomous cyberattacks on exposed servers with limited human involvement. [...]
Ryan is joined by Rosemary Wang, Developer Advocate at IBM, to explore what infrastructure-as-code looks like once AI starts writing and deploying it. ...
View CSAF Summary SIMATIC S7-PLCSIM Advanced contains a vulnerability that could allow an attacker to cause a denial of service condition. Siemens is preparing fix versions and recommends specific countermeasures for...
Amazon linked multiple high-profile open-source software supply chain attacks targeting the Node Package Manager (npm) ecosystem to North Korean hackers. [...]
Ryan welcomes Saahil Jain, CTO of You.com, to discuss why building agents with a 2024 mindset is a mistake as modern models improve at long-horizon tasks, why heavy orchestration layers can hurt model performance...
View CSAF Summary Successful exploitation of this vulnerability could allow attackers to rapidly guess passwords and gain unauthorized system access. The following versions of MikroTik RouterOS and Cloud Hosted...
Signature-based detection has always known what it was looking for. Machine learning and autonomous agents are changing the question entirely, shifting from "does this match a known pattern?" to "does this actually...
View CSAF Summary Successful exploitation of this vulnerability could allow an authenticated attacker to write arbitrary files to restricted system directories outside of the application's intended directory. The...