Search for a command to run...
Articles tagged with #cybersecurity
I have not caught a single piece of malware in 25 years on a keyboard. Not one. I spot a .scr disguised as a PDF from across the room. I smell a sketchy postinstall script ten meters away. At 14 I even wrote two or three viruses myself, just to under...
I see VERCEL hacked going around the feed. Then this morning, an email from VERCEL in my inbox. Alright, I hadn't planned any maintenance today. Apparently there's an emergency. I open the Vercel dashboard of a project running in prod. Six orange bad...
Yesterday, Cal.com closed their source code. One of the world's largest Next.js open source projects. Done. Co-founder Bailey Pumfleet figures that sharing your code in the age of AI is like handing out the blueprint to a bank vault to 100x more hack...
Given the state of MCP security right now, I wanted to check my own stack. 30 CVEs between January and February 2026. An npm package (mcp-remote, 558K+ downloads) with a critical RCE flaw. A fake Postmark server on the MCP registry, silently exfiltra...
I use Claude Code every day. I tell it "do this," it does. I tell it "install that," it installs. I tell it "delete this," it deletes. That's the job. That's what I pay for. And that is exactly the psychological profile that social engineering has ex...
It started as an April fish. It ended as supply-chain poison. On April 1st, I did what any reasonable developer does. I built a fake leaked repo. A README with a fish emoji. A license called POISSON-D-AVRIL-1.0. A Python file that prints an ASCII fis...
