PGLinks

TeamPCP deploys CanisterWorm on NPM following Trivy compromise

https://www.aikido.dev/blog/teampcp-deploys-worm-npm-trivy-compromise

open source security supply chain

Added 22 hours ago

Switzerland built an alternative to BGP. Nobody noticed • The Register

https://www.theregister.com/2026/03/17/switzerland_bgp_alternative/

bgp network routing security

Added 2 days ago

VulHunt: Open-source vulnerability detection framework - Help Net Security

https://www.helpnetsecurity.com/2026/03/16/vulhunt-open-source-vulnerability-detection-framework/

open source security software vulnerability

Added 4 days ago

I found 39 Algolia admin keys exposed across open source documentation sites

https://benzimmermann.dev/blog/algolia-docsearch-admin-keys

data hackernews search security

Added 1 week ago

Bucketsquatting is (finally) dead

https://onecloudplease.com/blog/bucketsquatting-is-finally-dead

aws hackernews s3 security

Added 1 week ago

Google closes deal to acquire Wiz

https://www.wiz.io/blog/google-closes-deal-to-acquire-wiz

cyber google hackernews security

Added 1 week ago

Wikipedia was in read-only mode following mass admin account compromise

https://www.wikimediastatus.net

cyber hackernews incident security

Added 2 weeks ago

A GitHub Issue Title Compromised 4k Developer Machines

https://grith.ai/blog/clinejection-when-your-ai-tool-installs-another

cyber github hackernews security vulnerability

Added 2 weeks ago

Turn Dependabot Off

https://words.filippo.io/dependabot/

dependencies github hackernews security

Added 1 month ago

Ghidra by NSA

https://github.com/NationalSecurityAgency/ghidra

hackernews open source security software

Added 1 month ago

The Israeli Spyware Firm That Accidentally Just Exposed Itself

https://ahmedeldin.substack.com/p/the-israeli-spyware-firm-that-accidentally

security

Added 1 month ago

Sandwich Bill of Materials

https://nesbitt.io/2026/02/08/sandwich-bill-of-materials.html

cyber food funny hackernews security supply chain

Added 1 month ago

Windows Notepad App Remote Code Execution Vulnerability

https://www.cve.org/CVERecord?id=CVE-2026-20841

cyber hackernews microsoft security vulnerability

Added 1 month ago

The Day the Telnet Died

https://www.labs.greynoise.io/grimoire/2026-02-10-telnet-falls-silent/

cyber hackernews security

Added 1 month ago

Microsoft open-sources LiteBox, a security-focused library OS

https://github.com/microsoft/litebox

cyber hackernews microsoft open source security software

Added 1 month ago

Opus 4.6 uncovers 500 zero-day flaws in open-source code

https://www.axios.com/2026/02/05/anthropic-claude-opus-46-software-hunting

ai ai agents hackernews llm security vulnerability

Added 1 month ago

Kusari

https://us.kusari.cloud/signup

actions github open source security

Added 1 month ago

NONO - Secure Shell for AI Agents

https://nono.sh/

ai ai agents llm security

Added 1 month ago

Show HN: Fence – Sandbox CLI commands with network/filesystem restrictions

https://github.com/Use-Tusk/fence

hackernews security

Added 1 month ago

Supply Chain Vuln Compromised Core AWS GitHub Repos & Threatened the AWS Console

https://www.wiz.io/blog/wiz-research-codebreach-vulnerability-aws-codebuild

hackernews security supply chain vulnerability

Added 2 months ago

Ansible battle tested hardening for Linux, SSH, Nginx, MySQL

https://github.com/dev-sec/ansible-collection-hardening

ansible devsecops hackernews security

Added 2 months ago

Gpg.fail

https://gpg.fail

cyber gnupg hackernews security vulnerability

Added 2 months ago

The Letter — Stop Hacklore!

https://www.hacklore.org/letter

cyber security

Added 3 months ago

Years-old bugs in open source took out major clouds at risk • The Register

https://www.theregister.com/2025/11/24/fluent_bit_cves/

cyber observability open source OTel security software vulnerability

Added 3 months ago