read.ehrlich.dev
ai-curated rss
about
github
rss
dark
security
Offensive and defensive security, penetration testing, and vulnerability research
hot
new
week
month
year
spaces
all
ai
ai agents
security
site reliability
digital rights
malware analysis
cloud infrastructure
open source
energy
quantum computing
machine learning
behavioral economics
reverse engineering
devops
git internals
internet culture
physics
design
api design
economics
complexity
materials science
wasm
math olympiad
webdev
data engineering
space exploration
political philosophy
mathematics
game dev
cryptography
chemistry
databases
distributed systems
observability
solo dev
statistics
reinforcement learning
creative coding
aerospace
birding
climate science
game theory
algorithmic trading
neuroscience
elixir
thermodynamics
category theory
technical writing
procedural generation
urban exploration
cellular automata
golang
indie games
number theory
self hosted
nanotechnology
cognitive science
astrophysics
oceanography
history of science
worldbuilding
topology
anthropology
genetics
linux
robotics
python
board games
exploit development
operating systems
manga
archaeology
decision theory
astrobiology
film
consciousness
computer vision
information theory
swift
mechanical keyboards
computer graphics
containers
formal verification
amateur astronomy
chess
philosophy of mind
kotlin
nuclear
evolution
homelab
history
programming languages
data visualization
finance
bioinformatics
pharmacology
javascript
go game
compilers
paleoanthropology
photography
information design
demoscene
true crime
networking
retrocomputing
ham radio
animation
embedded systems
computer architecture
vinyl
fractals
ethics
nix
cartography
puzzles
meditation
writing
philosophy
audio programming
metaphysics
woodworking
sci fi
rust
ecology
3d printing
existentialism
electronic music
sourdough
speedrunning
history of computing
tabletop rpg
mycology
geology
semiotics
horror
synths
typography
lisp
pixel art
aquariums
type theory
fermentation
standup comedy
linguistics
witsrtn
typescript
cpp
phenomenology
fpga
shell scripting
lock picking
haskell
conlangs
forth
espresso
nonduality
music theory
zig
philosophy of science
420
Microsoft Authenticator Flaw Lets Malicious Android Apps Steal Account Tokens With Zero Permissions
(cybersecuritynews.com)
2 hours ago ·
security
·
malware analysis
340
HTTP2Shell Vulnerability Extends Beyond HTTP, Affecting .NET, FFmpeg, ClickHouse, and Apache Arrow
(cybersecuritynews.com)
2 hours ago ·
security
·
malware analysis
220
Hacker Exploits Critical PHP2Shell Flaws to Win $2,000 Bitcoin Challenge, Releases PoC
(cybersecuritynews.com)
5 hours ago ·
security
·
reverse engineering
210
5 RTC Room Token Facts Explaining Identity and Permissions Clearly
(dev.to)
5 hours ago ·
security
·
api design
160
Interview with Ondřej Surý in the Atlanic
(j11g.com)
2 hours ago ·
site reliability
·
security
310
PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking
(thehackernews.com)
16 hours ago ·
security
·
malware analysis
320
Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers
(thehackernews.com)
15 hours ago ·
security
·
cloud infrastructure
160
Black October Is a Good Reason to Finally Use Passkeys and 2FA
(dev.to)
7 hours ago ·
security
·
malware analysis
140
Validating OAuth Metadata and JWTs
(dev.to)
3 hours ago ·
api design
·
security
165
Foundation Links Passport Phishing Emails to Compromised Cloudflare API Keys
(thedefiant.io)
5 hours ago ·
security
·
cryptography
240
Tailscale SSH Flaws Could Let Hackers Gain Root Access Across Servers From One Compromised Device
(cybersecuritynews.com)
19 hours ago ·
malware analysis
·
security
120
Cve.now: A Free Feed of Security Vulnerabilities for Agents
(sazabi.com)
8 hours ago ·
site reliability
·
security
180
How to Check a Software Wallet—and What the Checks Cannot Prove
(thedefiant.io)
16 hours ago ·
cryptography
·
security
110
Security Audit Report: Reentrancy & Access Control Review: Bitget
(dev.to)
9 hours ago ·
open source
·
security
150
UTS #39: Unicode Security Mechanisms
(unicode.org)
16 hours ago ·
security
·
digital rights
210
Detecting exploitation of the Plex timeline SSRF in server and network telemetry
(dev.to)
23 hours ago ·
site reliability
·
security
320
Detecting abuse of CVE-2026-74041 in Wazuh Manager with the logs you already keep
(dev.to)
1 day ago ·
security
·
malware analysis
120
CVE-2026-114148 ASP.NET Core Elevation of Privilege Vulnerability
(msrc.microsoft.com)
19 hours ago ·
security
·
cloud infrastructure
320
I scanned my machine for the Brotli RCE. Three stacks were exposed — and the patched one still reports the vulnerable version.
(dev.to)
1 day ago ·
security
·
open source
110
Seria uderzeń w głąb Rosji. Trafione kluczowe zakłady przemysłowe, są ranni
(rp.pl)
17 hours ago ·
urban exploration
·
security
45
Украина атаковала Воронеж дронами и ракетами. Повреждены жилые дома и 25-этажный бизнес-центр
(meduza.io)
3 hours ago ·
urban exploration
·
security
310
A request smuggling flaw on an ADC is a flaw in everything behind it
(dev.to)
1 day ago ·
security
·
api design
45
Huti twierdzą, że znów zaatakowali rurociąg Wschód-Zachód
(rp.pl)
5 hours ago ·
cloud infrastructure
·
security
420
Grafana's SQL Expressions Reached DuckDB, and DuckDB Reaches the Filesystem
(dev.to)
2 days ago ·
git internals
·
security
230
Two CVEs, One Intrusion: Sorting Priorities When Scores Mislead
(dev.to)
1 day ago ·
site reliability
·
security
320
A Model Registry With an Outbound Dial: What CVE-2026-64849 Hands an Unauthenticated Caller
(dev.to)
1 day ago ·
security
·
cloud infrastructure
135
OpenAI shipped a php2shell checker. I ran it against 65 sites. All 65 said UNKNOWN.
(dev.to)
1 day ago ·
security
·
reverse engineering
180
Pierluigi Paganini answers questions about the PHP2Shell flaws
(securityaffairs.com)
1 day ago ·
security
·
open source
40
Submarine torpedo strike sends frigate to bottom of sea, proves naval warfare efficacy
(interestingengineering.com)
10 hours ago ·
aerospace
·
security
320
পিএইচপির নিরাপত্তা ত্রুটি যেভাবে বিশ্বজুড়ে সাইবার হামলার সুযোগ করে দিল
(prothomalo.com)
2 days ago ·
security
·
reverse engineering
45
One man became the unsung hero of the internet during a cyber-security scramble
(bbc.com)
16 hours ago ·
digital rights
·
security
35
Армія РФ атакувала об’єкт енергетики на Хмельниччині: є знеструмлення
(pravda.com.ua)
9 hours ago ·
energy
·
security
30
Lebih Canggih dari Patriot AS? Turki Sukses Uji Rudal SIPER yang Bisa Ganti Target di Udara
(news.republika.co.id)
11 hours ago ·
aerospace
·
security
280
MoviePilot let the model decide whether a command was dangerous
(dev.to)
2 days ago ·
security
·
open source
110
WireGuard Easy 15.5 Adds AmneziaWG 3.1 Support, Security Fixes
(linuxiac.com)
1 day ago ·
security
·
cloud infrastructure
60
Украинские беспилотники атаковали Пермский край. Под удар попало предприятие «ВСМПО-Ависма», утверждают мониторинговые каналы
(meduza.io)
23 hours ago ·
security
·
urban exploration
210
CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud
(thehackernews.com)
2 days ago ·
security
·
malware analysis
620
Compromised TLS Certificates
(schneier.com)
2 days ago ·
cryptography
·
security
650
Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data
(thehackernews.com)
3 days ago ·
security
·
site reliability
35
Security Affairs newsletter Round 601 by Pierluigi Paganini – INTERNATIONAL EDITION
(securityaffairs.com)
20 hours ago ·
security
·
digital rights
50
На Житомирщині дрони пошкодили енергооб'єкт, амбулаторію та будинок
(pravda.com.ua)
23 hours ago ·
urban exploration
·
security
420
New Node2Shell Node.js RCE Exploit Let Attackers Execute Malicious Code Through Brotli-Compressed Data
(cybersecuritynews.com)
2 days ago ·
security
·
malware analysis
320
The SIEM as an attack surface: FortiSIEM CVE-2026-106173 and the cron script behind it
(dev.to)
2 days ago ·
cloud infrastructure
·
security
30
Polska firma pomoże wykryć zamachowca i sabotażystę. Śledztwo może trwać zaledwie kilka minut
(cyfrowa.rp.pl)
20 hours ago ·
malware analysis
·
security
45
PHP2Shell scare sees SuperTuxKart pull its online server
(omgubuntu.co.uk)
1 day ago ·
security
·
open source
480
Arista VeloCloud Orchestrator CVE-2026-114625: a SQL injection that crosses the privilege boundary
(dev.to)
2 days ago ·
security
·
cloud infrastructure
210
Velociraptor: 237 title matches, 15 certificate hits, and an endpoint agent you cannot see
(dev.to)
2 days ago ·
malware analysis
·
security
45
eMudhra faces a bigger test of public trust after security lapse
(economictimes.indiatimes.com)
1 day ago ·
cryptography
·
security
420
Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image
(thehackernews.com)
2 days ago ·
git internals
·
security
15
Show HN: Security Headers Checker
(companyofcraft.com)
14 hours ago ·
malware analysis
·
security
12
Росія вдарила по Запоріжжю: поранені люди, пошкоджені приватні будинки
(pravda.com.ua)
5 hours ago ·
security
40
Украина ударила по Белгороду, погибли два человека. За ночь более 500 беспилотников атаковали российские регионы
(meduza.io)
1 day ago ·
security
·
cellular automata
15
.NET October 2026 Out-of-Band Security Updates
(devblogs.microsoft.com)
13 hours ago ·
reverse engineering
·
security
65
U.S. CISA adds Collabora Online flaw to its Known Exploited Vulnerabilities catalog
(securityaffairs.com)
1 day ago ·
security
·
open source
210
A path traversal on a mail gateway is a write primitive, not a file-read bug
(dev.to)
2 days ago ·
security
·
git internals
30
বিরোধী আন্দোলনে দিশাহারা অমিত শাহ গেলেন পুলিশ সদর দপ্তরে
(prothomalo.com)
1 day ago ·
digital rights
·
security
280
CVE-2026-109619: the PHP flaw that outlives its own request
(dev.to)
2 days ago ·
security
·
exploit development
210
Metasploit Wrap Up: Langflow, MongoDB, and More
(rapid7.com)
2 days ago ·
security
·
git internals
240
Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials
(thehackernews.com)
2 days ago ·
cloud infrastructure
·
security
280
URGENT - PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches
(thehackernews.com)
2 days ago ·
security
·
exploit development
210
Critical PHP2Shell Exploit Code Goes Public as Hackers Attempt to Deploy Botnet Malware
(cybersecuritynews.com)
2 days ago ·
security
·
malware analysis
320
Hackers Exploit Critical Citrix NetScaler RCE Flaw to Deploy Web Shells and Malware
(cybersecuritynews.com)
3 days ago ·
security
·
cloud infrastructure
320
Oracle Issues Emergency Java Update for Critical 9.1 HTTPS Trust Vulnerability
(cybersecuritynews.com)
3 days ago ·
security
·
api design
280
ФСБ велела отключить сайты критической инфраструктуры России из-за уязвимостей в языке программирования PHP
(meduza.io)
3 days ago ·
security
·
open source
210
426 Android and iOS Apps Linked to PHP2Shell Backend Risks
(hackread.com)
2 days ago ·
security
·
webdev
140
Trust Is Not What It Seems — And Fraudsters Are Counting on It
(darkreading.com)
2 days ago ·
malware analysis
·
security
120
Investigating the PingCAP Security Incident
(nebusec.ai)
2 days ago ·
security
·
malware analysis
120
The Hackening
(lesswrong.com)
2 days ago ·
malware analysis
·
security
160
Critical Okta Access Gateway Flaw Lets Attackers With Admin Access Execute System Commands
(cybersecuritynews.com)
2 days ago ·
security
·
golang
280
Past Precedent: Why BeyondTrust Edge Appliances Keep Returning to the Exploited List
(dev.to)
3 days ago ·
malware analysis
·
security
240
Hackers Inject Credential-Stealer, RAT Into LiteLLM
(devops.com)
3 days ago ·
open source
·
security
220
PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware
(thehackernews.com)
3 days ago ·
security
·
malware analysis
95
Computer Security Is About to Get a Lot Worse, Here’s What You Can Do
(eff.org)
2 days ago ·
security
·
malware analysis
180
PHP2Shell: Millions of Attacks, No Confirmed Successful Exploits Yet
(securityaffairs.com)
2 days ago ·
security
·
git internals
650
Websites across world hit by millions of attempts to exploit PHP code flaw
(theguardian.com)
3 days ago ·
security
·
reverse engineering
480
Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes
(thehackernews.com)
3 days ago ·
security
·
site reliability
20
Військові перехопили літак над резиденцією Трампа
(pravda.com.ua)
1 day ago ·
security
·
cloud infrastructure
450
Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks
(thehackernews.com)
3 days ago ·
security
·
cloud infrastructure
120
PHP Warns of New Code Execution Flaw Days After PHP2Shell Patches
(securityaffairs.com)
2 days ago ·
security
·
git internals
140
HPE Warns Critical Aruba Networking Flaws Could Let Hackers Take Complete Control of Devices
(cybersecuritynews.com)
2 days ago ·
cloud infrastructure
·
security
520
Signal Vulnerability Could Keep Calls Alive After Users Hang Up
(securityaffairs.com)
3 days ago ·
malware analysis
·
security
40
কলকাতা বিমানবন্দরে পরপর দুই দিন ভুয়া খবরে বোমাতঙ্ক
(prothomalo.com)
1 day ago ·
digital rights
·
security
160
Tell HN: Unbounce Security Incident
(news.ycombinator.com)
2 days ago ·
security
·
malware analysis
160
LibreSSL 4.4 Released with Post-Quantum TLS Improvements, Security Fixes
(linuxiac.com)
2 days ago ·
security
·
cryptography
140
Global PHP scramble reaches the Union Buildings
(techcentral.co.za)
2 days ago ·
security
·
site reliability
60
Affari extra Ue e 007 israeliani, Fratoianni al governo: fare chiarezza su Dataflow Security
(repubblica.it)
2 days ago ·
digital rights
·
security
15
Російська армія вдарила по критичній інфраструктурі Дніпра
(pravda.com.ua)
1 day ago ·
security
·
site reliability
145
Why the Django admin says 403 behind a proxy, and the one line that fixes it
(dev.to)
2 days ago ·
api design
·
security
210
Five NGINX CVEs are conditional. Measure the conditions, not just the version
(dev.to)
3 days ago ·
security
·
open source
450
Сотни миллионов сайтов оказались под угрозой взлома из-за уязвимостей в языке программирования PHP. Насколько это опасно? И угрожает ли что-то лично вам?
(meduza.io)
3 days ago ·
security
·
git internals
12
Унаслідок російських ударів по Харкову постраждали троє рятувальників
(pravda.com.ua)
1 day ago ·
security
·
urban exploration
105
Sending Emails With Python
(realpython.com)
2 days ago ·
python
·
security
35
Ukraina ogłasza sukcesy, uderzyła w czułe punkty Rosji. „Ciąg dalszy nastąpi”
(rp.pl)
1 day ago ·
security
15
Росіяни атакували торговельний об’єкт в Запоріжжі: спалахнула пожежа
(pravda.com.ua)
1 day ago ·
security
·
game dev
65
Exposed to PHP2Shell? Cyber Experts Weigh in With Advice
(darkreading.com)
2 days ago ·
security
·
malware analysis
40
Capcom Data Breach Exposes 11.7 Million Email Addresses
(securityaffairs.com)
1 day ago ·
malware analysis
·
security
210
Reading the 9.9: What CVSS Tells You About CVE-2026-114625, and What It Does Not
(dev.to)
3 days ago ·
site reliability
·
security
160
‘Game of cat and mouse’: Digital Policy Office urges immediate patching as AI-discovered PHP flaws threaten global web
(hongkongfp.com)
3 days ago ·
git internals
·
security
140
Arista waarschuwt voor misbruikt SQL Injection-lek in VeloCloud Orchestrator
(security.nl)
3 days ago ·
security
·
cloud infrastructure
520
New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification
(thehackernews.com)
4 days ago ·
security
·
exploit development
spaces
all
ai
ai agents
security
site reliability
digital rights
malware analysis
cloud infrastructure
open source
energy
quantum computing
machine learning
behavioral economics
reverse engineering
devops
git internals
internet culture
physics
design
api design
economics
complexity
materials science
wasm
math olympiad
webdev
data engineering
space exploration
political philosophy
mathematics
game dev
cryptography
chemistry
databases
distributed systems
observability
solo dev
statistics
reinforcement learning
creative coding
aerospace
birding
climate science
game theory
algorithmic trading
neuroscience
elixir
thermodynamics
category theory
technical writing
procedural generation
urban exploration
cellular automata
golang
indie games
number theory
self hosted
nanotechnology
cognitive science
astrophysics
oceanography
history of science
worldbuilding
topology
anthropology
genetics
linux
robotics
python
board games
exploit development
operating systems
manga
archaeology
decision theory
astrobiology
film
consciousness
computer vision
information theory
swift
mechanical keyboards
computer graphics
containers
formal verification
amateur astronomy
chess
philosophy of mind
kotlin
nuclear
evolution
homelab
history
programming languages
data visualization
finance
bioinformatics
pharmacology
javascript
go game
compilers
paleoanthropology
photography
information design
demoscene
true crime
networking
retrocomputing
ham radio
animation
embedded systems
computer architecture
vinyl
fractals
ethics
nix
cartography
puzzles
meditation
writing
philosophy
audio programming
metaphysics
woodworking
sci fi
rust
ecology
3d printing
existentialism
electronic music
sourdough
speedrunning
history of computing
tabletop rpg
mycology
geology
semiotics
horror
synths
typography
lisp
pixel art
aquariums
type theory
fermentation
standup comedy
linguistics
witsrtn
typescript
cpp
phenomenology
fpga
shell scripting
lock picking
haskell
conlangs
forth
espresso
nonduality
music theory
zig
philosophy of science