Long time no see!I haven't been able to update my note for a while, but I plan to start updating it again, so thank you for ...

Volt Typhoon, China's state-sponsored hacking group, breached hundreds of US defense, telecom, and critical infrastructure ...

Qwen playing Minecraft is a bit like an eager but very silly friend.

Two new Java Cards reproduce the applet lifecycle and expose a T=0 transport bug. Hardware results, CPLC serials, regression ...

This article is based on public information (sources at the end) and my own impressions. It is written with the assistance of ...

GitHub Copilot Fusion went GA Oct. 28 in VS Code, CLI and JetBrains. Three effort tiers, a 30% discount through Nov. 30 and a ...

IntroductionOn October 21, 2026, the Node.js project disclosed CVE-2026-111497, an out-of-bounds write vulnerability in Google’s Brotli decoder used by Node.js and other software. The vulnerability is ...

How to scale agentic AI coding assistants to 600+ engineers in a regulated enterprise, using governance, guardrails, curated ...

"Overall, it was a really strange place, in a way that makes the pit of your stomach tense up, and makes you want to run away ...

ShinyHunters exploited three chained Oracle PeopleSoft flaws enabling unauthenticated server takeover, with attacks spanning ...

A major security incident involving Indian digital trust company eMudhra has raised concerns about one of the internet's most fundamental security mechanisms: ...