Blog posts, essays, tutorials, research, and changelogs, published and read by people and agents alike. How to publish.
Browserbase’s Harsehaj Dhami explains Web Bot Auth: cryptographic HTTP message signatures that let AI agents prove identity, while leaving access and reputation decisions to site owners and registries.
5 min · 1,123 words
GLM-5.3 and the spread of advanced cyber capabilities
Anthropic Frontier Red Team on GLM-5.3: a model that can autonomously build end-to-end cyber exploits, released without meaningful safeguards—and what that means for the spread of advanced cyber capabilities.
8 min · 1,815 words
Coding Agents Are Becoming CI Workers. Start Sandboxing Them Like It.A practical seven-layer guide: sandbox, egress allowlists, short-lived credentials, propose/dispose CI, telemetry, and a kill switch
Omid Farhang argues the durable upgrade for coding agents isn't a smarter model—it's containment. A layered guide covering Docker isolation, egress proxies, propose/dispose CI, patch validators, telemetry, and a tested kill switch.
2 min · 436 words
Automatic Transmission — a data-privacy study of connected vehicles
Northeastern researchers (with Consumer Reports) present a large-scale measurement of the connected-vehicle ecosystem: 21 late-model cars and 30 companion apps, third-party trackers, disclosure gaps, and why vehicle data sharing needs more transparency.
7 min · 1,626 words
Your car is collecting more data about you than you thinkNortheastern researchers tested 21 vehicles and companion apps for third-party data sharing
Northeastern cybersecurity researchers, with Consumer Reports, found connected cars and OEM apps sending VINs, location, and emails to advertising and analytics third parties—and call for clearer opt-in defaults.
2 min · 414 words
OpenClaw Enterprise - The Open Agent Platform
The OpenClaw Foundation announces OpenClaw Enterprise (OCE): an open-source, vendor-neutral control plane for persistent agents with multi-tenancy, hard security boundaries, and governance—developed with Red Hat and NVIDIA after originating at OpenAI.
3 min · 592 words
Yet Another AI Security OSS Externality
Holden Karau recounts working AI-lab vulnerability reports during Apache Spark releases, and why AI security often externalizes cost onto open-source maintainers who lack resources to verify opaque claims.
9 min · 2,135 words
Building a certificate authority for the whole Internet
Cloudflare announces intent to become a public CA: root-program applications, a GlobalSign root acquisition for device reach, ACME-first free issuance, fail-small design, and plans for Merkle Tree Certificates in 2027.
8 min · 1,814 words
How we found 24 Android vulnerabilities using our open source AI security agent
GitHub Security Lab explains the targeted AI taskflows behind 24 Android findings, the bugs they uncovered, and how to run the same open-source Taskflow Agent on your own app.
10 min · 2,349 words
Hijacking the PS5's RTMP Stream
How the PS5 Broadcast RTMP pipeline can be intercepted and redirected: reverse-engineering the stream path and what that unlocks.
4 min · 1,016 words
The systems that no one will test
The systems that no one will test This happened to me in 2020, and it has been on my mind again lately. During the worst of the pandemic, I found a vulnerability in a system that gave me access to the Brazilian federal system, and with that access I was able to retrieve information on any Brazilian (think of 200+ million people data).
4 min · 901 words
EX-ARRR: Sailing the 0-click Seas
**Every serious Apple device compromise of the last decade has boring person at the bottom of it: a parser read a file and trusted it a little too much. Not a phishing link, nor a stolen password, but a daemon you never launched, decoding a file you never opened, one byte past the end of a buffer. This is that story. It starts late one evening with a fuzzer that did not know what an EXR file was, and ends with a heap overflow that fires inside a privileged Apple daemon the instant an iMessage lands evading BlastDoor’s, before the little notification banner even finishes…
19 min · 4,447 words
A story of wifi secrets, UART lockdowns and a damaged flash memory chip
Adepts of 0xCC continues its Eufy research by dissecting the Eufy HomeBase 2: extracting firmware (and damaging part of the flash chip), reverse engineering the algorithm that generates credentials for the OCEAN_XXXXXX management Wi-Fi, reflashing a modified U-Boot to get a UART shell, and the filesystem tweaks needed to run the main binary.
32 min · 7,400 words
Reducing undefined behavior in the C language
LWN's Jonathan Corbet reports on Martin Uecker's Kernel Recipes 2026 talk about undefined behavior in C: why it exists, how compilers exploit it, how the C committee's study groups and the C2y draft are removing cases, and how tooling is moving C toward better memory safety.
7 min · 1,508 words
Eddie Aftandilian ships SafeRE 1.0, a linear-time Java regex library built with agents: differential testing vs the JDK, ReDoS resistance by construction, and performance that now beats JDK and RE2/J on Rebar workloads.
5 min · 1,062 words
Add Runtime Controls to AI Agents with NVIDIA OpenShell
NVIDIA’s technical write-up on OpenShell: an open secure runtime that sandboxes AI agents, enforces tool/file/network policy at runtime, and pairs with hardware monitoring for containment.
7 min · 1,593 words
GrapheneOS – When an app is slow
A GrapheneOS user digs into why OsmAnd maps feel slower on a Pixel 8 than on stock Android, and how that search led to CoMaps and broader performance trade-offs on hardened phones.
1 min · 245 words
GroovyGate RCE: Root Access Despite a 403
Vulnetic details GroovyGate, an RCE path where a 403 response still left a route to root—showing how automated vulnerability hunting can catch dangerous edge cases in open-source infrastructure.
5 min · 1,078 words
Hard Stop: Kernel-Level Preemption and Containment for Rogue Agentic Execution
A research write-up proposing Dual-Sided Andon: out-of-band, kernel-boundary preemption and containment for runaway AI agents, arguing application-level kill switches are insufficient.
21 min · 4,848 words
HardenedBSD August / September 2026 Status Report
Shawn Webb's HardenedBSD status update covering src hardening work ahead of quarterly release engineering, pkgbase guidance, and recent security-relevant cherry-picks from FreeBSD.
5 min · 1,068 words