Railway Security Disclosure: Wednesday October 21st https://lobste.rs/s/wi4nnl #devops #security
https://blog.railway.com/p/security-disclosure-wednesday-october-21st
security
Sandboxing with minimal effort via @fanf https://lobste.rs/s/zji8bf #security
https://yorickpeterse.com/articles/sandboxing-with-minimal-effort/
How to Run Turing-Complete Malware in PyTorch's Backward Pass https://lobste.rs/s/urfgc9 #ai #python #security
https://elonlit.com/scrivings/how-to-run-turing-complete-malware-in-pytorchs-backward-pass/
Reviving TEMPEST Attacks With An Injected Signal https://lobste.rs/s/ub3vw7 #hardware #security
https://hackaday.com/2026/09/20/reviving-tempest-attacks-with-an-injected-signal/
Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor https://lobste.rs/s/2czsv4 #ai-tooling #security
https://safedep.io/litellm-pypi-compromise-credential-stealer-backdoor
Blair is reported to have said that the Freedom of Information Act was one of the things he regretted the most. Possibly even more than Devolution (although that was inevitable). This is an example of why. The government must hate it.
But don’t worry, practice will make perfect.
#FOI #FreedomOfInformation #Blair #Labour #Legislation #UKPol #FacialRecognition #Privacy #Security
Edited 43d ago
The Vulnpocalypse Is Repricing the Bug Bounty Economy https://lobste.rs/s/ta0fg1 #security
https://www.darkreading.com/vulnerabilities-threats/vulnpocalypse-repricing-bug-bounty-economy
SAML: A fractal of bad design via @fanf https://lobste.rs/s/4uqtta #rant #security
https://blog.trailofbits.com/2026/09/21/saml-a-fractal-of-bad-design/
Security Incident – BGP Hijacking – Virtualizor via @rk https://lobste.rs/s/6e1y6s #security
https://www.virtualizor.com/blog/security-incident-bgp-hijacking/
I Think the Military Commissary Freezers Were Hacked https://lobste.rs/s/ygjo0g #security
https://signalandsilence.substack.com/p/i-think-someone-hacked-the-commissary
There isn't an easy exploit for this PHP vulnerability https://lobste.rs/s/zpcnmo #php #security
https://eliastaylor.com/noexploit/
Upcoming C-tor security release - 0.4.9.12 https://lobste.rs/s/hveyuq #security
https://forum.torproject.org/t/tor-dev-upcoming-c-tor-security-release-0-4-9-12/22075
Latest BGP hijack targets hosting software vendor via @fanf https://lobste.rs/s/eqme8i #networking #security
https://blog.apnic.net/2026/09/22/latest-bgp-hijack-targets-hosting-software-vendor/
Hillingar - MirageOS Unikernels on NixOS https://lobste.rs/s/ifyeuo #ml #nix #osdev #security
https://ryan.freumh.org/hillingar.html
Stop Telling People Not To Click Links https://lobste.rs/s/kvfua1 #security
https://www.forbes.com/councils/forbestechcouncil/2026/08/26/stop-telling-people-not-to-click-links/
Radicle: Disclosure of Vulnerability in the Network Protocol https://lobste.rs/s/ad5vwg #distributed #security #vcs
https://radicle.dev/2026/09/23/disclosure-of-vulnerability-in-network-protocol.html
Trusting-Trust Attack against an Entire Linux Distribution (via the strip utility) https://lobste.rs/s/p5w5j6 #linux #nix #security
https://arxiv.org/abs/2607.24888
Someone on Torrent Sites Kept Fucking With My Sonarr https://lobste.rs/s/1zknyw #rant #reversing #security
https://thereallo.dev/blog/someone-on-torrent-sites-kept-fucking-with-my-sonarr-setup
eMudhra to Exit global SSL/TLS Certificate Business https://lobste.rs/s/egkbzh #security
https://emudhra.com/en/press-release/emudhra-to-exit-global-ssl-tls-certificate-business
Have the frontier labs mixed up AI safety and security? https://lobste.rs/s/uu3hhz #ai #security
https://martinalderson.com/posts/ai-safety-vs-security/
I’ve factored the RSA keys of a Certificate Authority…from the 90s via @zzg https://lobste.rs/s/wl0mln #security
https://mcpherrin.ca/2026/09/07/rsa.html
We found a Chinese fleet via @unlobito https://lobste.rs/s/wcoes4 #security #vibecoding
https://swarmcha.se/posts/chinese-agent-fleet-full-report
Header Accordions: QPACK amplification attacks against HTTP/3 servers https://lobste.rs/s/l2l50n #security
https://foxio.io/blog/header-accordions-qpack-amplification-attacks-against-http-3-servers
Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0 (1999) https://lobste.rs/s/ojyeqg #design #security
https://www.usenix.org/legacy/events/sec99/full_papers/whitten/whitten_html/index.html