Light bulb Limited Spots Available: Secure Your Lifetime Subscription on Gumroad!

Articles & Guides

Showing 15 of 620 posts · RSS
Western Orthopaedics Just Sent 113,330 Patients a Letter—Their Social Security Numbers, Passwords, and Full Medical Histories Are on PEAR's Leak Site
Article

Western Orthopaedics Just Sent 113,330 Patients a Letter—Their Social Security Numbers, Passwords, and Full Medical Histories Are on PEAR's Leak Site

May 18, 2026 · 8 min read

Your Four Most Visited Websites Are a Unique Fingerprint—And Cookie Blocking Doesn't Hide It
Article

Your Four Most Visited Websites Are a Unique Fingerprint—And Cookie Blocking Doesn't Hide It

May 17, 2026 · 8 min read

Three Fake npm Versions Just Tried to Steal Your AWS, GCP, Azure—and Your Claude AI Settings
Article

Three Fake npm Versions Just Tried to Steal Your AWS, GCP, Azure—and Your Claude AI Settings

May 17, 2026 · 8 min read

Hackers Just Hijacked 30,000 Facebook Business Accounts Using a Trick Google Sells as a Feature—The Phishing Emails Came From noreply@appsheet.com
Article

Hackers Just Hijacked 30,000 Facebook Business Accounts Using a Trick Google Sells as a Feature—The Phishing Emails Came From noreply@appsheet.com

May 17, 2026 · 8 min read

Microsoft Confirmed a Zero Day That Fires JavaScript When You Open an Email in OWA—CISA Added It to KEV on May 15
Article

Microsoft Confirmed a Zero Day That Fires JavaScript When You Open an Email in OWA—CISA Added It to KEV on May 15

May 17, 2026 · 7 min read

NGINX Quietly Hosted the Same Heap Overflow for 18 Years—An Autonomous AI Found It in a 6 Hour Scan on April 18
Article

NGINX Quietly Hosted the Same Heap Overflow for 18 Years—An Autonomous AI Found It in a 6 Hour Scan on April 18

May 15, 2026 · 9 min read

Belarus's Hackers Are Phishing Ukraine's Government Again—This Time the Malicious PDF Checks Your IP Before It Decides Whether to Infect You
Article

Belarus's Hackers Are Phishing Ukraine's Government Again—This Time the Malicious PDF Checks Your IP Before It Decides Whether to Infect You

May 15, 2026 · 9 min read

Colorado Spent Two Years Building the First Comprehensive State AI Law—Then Gutted It 57-6 on May 12 and Pushed Everything to January 2027
Article

Colorado Spent Two Years Building the First Comprehensive State AI Law—Then Gutted It 57-6 on May 12 and Pushed Everything to January 2027

May 15, 2026 · 8 min read

11 Million Files Walked Out of Foxconn's Wisconsin Factory on May 1—Now Apple, Intel, Google, and Nvidia Schematics Are in a Ransomware Gang's Hands
Article

11 Million Files Walked Out of Foxconn's Wisconsin Factory on May 1—Now Apple, Intel, Google, and Nvidia Schematics Are in a Ransomware Gang's Hands

May 15, 2026 · 7 min read

Human Rights Watch Just Got the EU's Surveillance Export Records—Bulgaria Sold Spyware to Azerbaijan, Poland Sold Phone Interception to Rwanda, and Half the Bloc Refused to Hand Over Their Data
Article

Human Rights Watch Just Got the EU's Surveillance Export Records—Bulgaria Sold Spyware to Azerbaijan, Poland Sold Phone Interception to Rwanda, and Half the Bloc Refused to Hand Over Their Data

May 14, 2026 · 8 min read

Maryland Just Became the First State to Ban Surveillance Pricing at Grocery Stores—Then Wrote Four Loopholes Into the Law That Let Every Loyalty Program Keep Doing It
Article

Maryland Just Became the First State to Ban Surveillance Pricing at Grocery Stores—Then Wrote Four Loopholes Into the Law That Let Every Loyalty Program Keep Doing It

May 14, 2026 · 8 min read

Meta Spent Four Years Promising Instagram End to End Encryption—Then Removed It on May 8 and Blamed Users for Not Opting In to a Feature That Was Never On by Default
Article

Meta Spent Four Years Promising Instagram End to End Encryption—Then Removed It on May 8 and Blamed Users for Not Opting In to a Feature That Was Never On by Default

May 14, 2026 · 7 min read

An AI Found a Use After Free Bug in Exim—the Mail Server Behind More Than Half the Public Internet—And Triggering It Takes a Single Stray Byte at the Wrong Moment
Article

An AI Found a Use After Free Bug in Exim—the Mail Server Behind More Than Half the Public Internet—And Triggering It Takes a Single Stray Byte at the Wrong Moment

May 14, 2026 · 6 min read

84 Malicious TanStack Packages Just Got Published Through TanStack's Own Release Pipeline—Using a Stolen OIDC Token Pulled From the Runner's Process Memory
Article

84 Malicious TanStack Packages Just Got Published Through TanStack's Own Release Pipeline—Using a Stolen OIDC Token Pulled From the Runner's Process Memory

May 13, 2026 · 12 min read

The Opt Out Window Closes May 29: Google Will Pay $135 Million Because Android Phones Were Calling Home in the Background—Even While Idle
Article

The Opt Out Window Closes May 29: Google Will Pay $135 Million Because Android Phones Were Calling Home in the Background—Even While Idle

May 13, 2026 · 10 min read