Links
Add
DIY Synths
https://diy-synths.snnkv.com/
Curated collection of DIY-friendly hardware synthesizers and related musical equipment you can build on your own. All open source.
Added 1 month ago
Google launches Sec-Gemini v1. A new experimental cybersecurity model
https://security.googleblog.com/2025/04/google-launches-sec-gemini-v1-new.html?m=1
The “S” in MCP Stands for Security
https://elenacross7.medium.com/%EF%B8%8F-the-s-in-mcp-stands-for-security-91407b33ed6b
Frida Penetration Testing Tool Kit Released With New APIs for Threat Monitoring
https://search.app/1yiQn4N9PWiF9ZtL8
Frida 16.7.0, the latest version of the popular dynamic instrumentation toolkit, has been released with powerful new APIs specifically.
Added 1 month ago
Any program can be a GitHub Actions shell
https://yossarian.net/til/post/any-program-can-be-a-github-actions-shell/
Apache ECharts
https://echarts.apache.org/en/index.html
Apache ECharts, a powerful, interactive charting and visualization library for browser
Added 1 month ago
https://scitechdaily.com/scientists-discover-unique-100-hz-sound-that-alleviates-motion-sickness/
https://scitechdaily.com/scientists-discover-unique-100-hz-sound-that-alleviates-motion-sickness/
AI-hallucinated code dependencies become new supply chain risk
https://www.bleepingcomputer.com/news/security/ai-hallucinated-code-dependencies-become-new-supply-chain-risk/
A new class of supply chain attacks named 'slopsquatting' has emerged from the increased use of generative AI tools for coding and the model's tendency to "hallucinate" non-existent package names.
Added 1 month ago
CERN releases report on the feasibility of a possible Future Circular Collider
https://home.cern/news/news/accelerators/cern-releases-report-feasibility-possible-future-circular-collider
Added 1 month ago
Enhancing your DevSecOps with Wazuh. The open source XDR platform
https://www.bleepingcomputer.com/news/security/enhancing-your-devsecops-with-wazuh-the-open-source-xdr-platform/
Security shouldn't wait until the end of development. Wazuh brings real-time threat detection, compliance, and vulnerability scanning into your DevOps pipeline—powering a stronger DevSecOps strategy from day one. Learn more about how Wazuh can help secure your development cycle.
SSL/TLS certificate lifespans reduced to 47 days by 2029
https://www.bleepingcomputer.com/news/security/ssl-tls-certificate-lifespans-reduced-to-47-days-by-2029/
The CA/Browser Forum has voted to significantly reduce the lifespan of SSL/TLS certificates over the next 4 years, with a final lifespan of just 47 days starting in 2029.
Added 1 month ago
STRIDE GPT - AI-powered Tool LLMs To Generate Threat Models
https://cybersecuritynews.com/stride-gpt-ai-powered-tool/
A new tool has emerged that promises to revolutionize the way organizations approach threat modeling. STRIDE GPT, an AI-powered threat modeling tool, leverages the capabilities of large language models (LLMs) to generate comprehensive threat models
Added 1 month ago
The CVE program for tracking security flaws is about to lose federal funding
https://www.theverge.com/news/649314/cve-mitre-funding-vulnerabilities-exposures-funding
The federally funded organization behind the Common Vulnerabilities and Exposures (CVE) program confirmed that its contract to support the system will expire on April 16th.
An Ars Technica history of the Internet. Part 1 - Ars Technica
https://arstechnica.com/gadgets/2025/04/a-history-of-the-internet-part-1-an-arpa-dream-takes-form/
In our new 3-part series, we remember the people and ideas that made the Internet.
Unsure Calculator
https://filiph.github.io/unsure/
The Unsure Calculator is an online tool that lets you calculate with numbers you’re not sure about.
Added 1 month ago
CVE program faces swift end after DHS fails to renew contract. Leaving security flaw tracking in limbo
https://www.csoonline.com/article/3963190/cve-program-faces-swift-end-after-dhs-fails-to-renew-contract-leaving-security-flaw-tracking-in-limbo.html
After DHS did not renew its funding contract for reasons unspecified, MITRE’s 25-year-old Common Vulnerabilities and Exposures (CVE) program was slated for an abrupt shutdown on April 16, which would have left security flaw tracking in limbo. CISA stepped in to provide a bridge.
Added 1 month ago
CVE Foundation
https://www.thecvefoundation.org/home
The Common Vulnerabilities and Exposures (CVE) Program has become the cornerstone of vulnerability management. Nearly all technology vendors and service providers identify vulnerabilities with CVEs when they publish security advisories. Most security products and services related to vulnerabilities
Added 1 month ago
CISA extends funding to ensure 'no lapse in critical CVE services'
https://www.bleepingcomputer.com/news/security/cisa-extends-funding-to-ensure-no-lapse-in-critical-cve-services/
CISA says the U.S. government has extended MITRE's funding to ensure no continuity issues with the critical Common Vulnerabilities and Exposures (CVE) program.
Added 1 month ago
Understanding the Origins and the Evolution of Vi & Vim
https://pikuma.com/blog/origins-of-vim-text-editor
Added 1 month ago
Added 1 month ago