Security & Supply Chain

How a handful of YAML templates outpaced global botnets to secure critical telecom infrastructure without firing a single exploit.

A new safety system treats policy as input, not an afterthought. That makes moderation more transparent, more adaptable, and much harder to mistake for a fixed classifier.

AikidoSec’s opengrep-rules repository shows how static analysis is moving from code bugs to AI workflow abuse, one YAML file at a time.

A custom map converter, runtime hook layer, and Lua spoofing stack work together to load Steam Workshop-era content on jailbroken consoles by borrowing the game’s hidden PC pathways.

How a minimalist C daemon bypasses the bloated observability stack to turn raw sFlow data into instant DDoS mitigation.

A TypeScript proof of concept for prediction-market settlement that pulls live evidence, follows market rules, and falls back to UNKNOWN when confidence is too low.

How the fastest-growing AI protocol uses Pulumi and TypeScript to turn cross-platform community management into a single pull request.

How a Python utility reconstructs legacy password hashes and auto-discovers schemas to move user bases without forcing a single password reset.

A Rust runtime for hostile extension workloads, where containment, replay, and evidence are built into the engine instead of bolted on after the breach.

How a Rust-based daemon uses industrial control theory and sacrificial files to prevent disk exhaustion during high-velocity coding loops.

How a Python-driven repository became the machine-readable crisis dashboard for the most controversial agent framework in open-source history.

How a Go-based CLI and a specialized egress proxy are replacing local environment variables with boundary-level secret injection to secure autonomous coding agents.

A deep dive into the caching layer that keeps Descope’s auth graph fast, indexed, and usable even when the remote service is not.

A lattice-based folding machine in Lean and Rust that turns recursive proving, memory consistency, and future-proof security into one research prototype.

A forensic archive of prompt loops, split personas, and safety refusals that look like exploits until you read the fine print.

How Markdown policies, label ladders, and test datasets turn teen safety into a versioned enforcement spec.

A tiny repository provider with a big job: translate Wordfence advisories into Composer-native security checks, so WordPress plugins and themes can be blocked before they ever ship.

A lightweight GitHub index for the ESC1 to ESC10 attack surface, and a sharp example of how offensive security knowledge gets standardized, searched, and reused.

A practical hardening template for Claude Code that turns agentic coding from “hope it behaves” into explicit least-privilege controls, sandboxing, and human checkpoints.

How Starling teaches developers to sign requests, verify webhooks, and move between public banking APIs and payment services without guessing at the rules.

After the ClawHavoc supply chain attacks, a new breed of package manager is enforcing "Permission Budgets" on the AI skills that run our code.

A FreeBSD rtsold proof of concept shows how a valid-looking DNS search list can cross from C parsing into shell execution, turning local network presence into code execution.

Beem Development turns a public landing page into part of the security story, using React, Vike, and a tightly controlled SSR pipeline to keep the site fast, explicit, and easy to verify.

A deep dive into a Go-based transparent proxy that hijacks all container egress, peeks into TLS just enough to choose a path, and can even intercept DNS without touching application code.

A reverse-engineered iOS framework that breaks startup into 51 steps, hides its strings in layers, scans loaded libraries, and lets the server deliver the real verdict.

Google Research's high-interaction trap does more than fake a login prompt. It adds human-looking delay, captures every keystroke, and turns an intrusion into replayable evidence.

A tiny C++ proof of concept targets the update gap, not the scanner, showing how timing, NTAPI calls, and shared file handles can undermine a security engine from standard-user context.

Moving beyond "vibes-based" compliance with Rego policies, evidence hashing, and the Claude Code ecosystem.

A tiny FastAPI starter shows how to pair OpenAI Agents SDK with Vercel Sandbox microVMs, stream every tool call to the browser, and keep code execution ephemeral, inspectable, and serverless.

How a proposed middleware extension is turning the Model Context Protocol from a raw communication channel into a secure, auditable standard.

How an open-source backup engine solved the impossible problem of desktop OAuth without absorbing massive security liability.

It uses Terraform where orchestration belongs, StackSets where AWS can fan out cleanly, and `moved` blocks to refactor live security roles without a destructive rewrite.

How a local-first testing framework uses record-and-replay to tame infinite tool loops, catch prompt injections, and bring software engineering rigor to LLM agents.

A small Python framework turns dorking, cross-platform pivots, and structured reporting into a reconnaissance workflow for the age of locked-down social APIs.

An internal Pixel Worlds cheat that hooks the game, decodes nested BSON messages, and turns compressed network data into a live minimap and player tracker.

How the team behind the Hysteria proxy uses minimalist Bash scripts to manipulate IPv6 tables, bypass geo-blocks, and squeeze maximum throughput out of cheap VPS instances.

How a Rust-based man-in-the-middle proxy uses WebSockets and Rhai scripting to run adaptive, multi-turn adversarial attacks in CI/CD.

A niche Cobalt Strike module that sidesteps LSASS, leans on SeBackupPrivilege, and hides its own complexity behind a post-build symbol patching workflow.

A prewired OpenTelemetry stack for Gas City and Claude Code that turns prompts, tool calls, token burn, and agent lifecycles into something you can finally inspect.

This tiny repo does not scan code itself. It teaches Kiro to stop, check, fix, and rescan before unsafe code can move forward.

How a Python pipeline uses isolated Docker sidecars and cryptographic hashing to build a unified trust layer for autonomous agents.

Moving beyond "vibes" to a schema-first architecture that turns LLMs into validated, role-specific security engineers.

Inside a MuddyWater-linked backdoor that hides behind COM, phones home through a fake updater routine, and keeps its shell and exfiltration threads running in parallel.

A modern AESCrypt implementation for C# that balances strict security, legacy compatibility, and streaming performance.

How a minimalist forum plugin uses k-Anonymity and a controversial fail-open architecture to verify passwords without ever transmitting them.

How a suite of GitHub Actions brings traditional CI/CD discipline to non-deterministic LLM safety.

How a machine-generated Python SDK delivers high-stakes mental health safety evaluations for conversational AI.

How vuln-scanner transforms raw reconnaissance into a prioritized hit list for elite security researchers.