Ideas for building
better software.

Flutter Q2 survey

LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servers

A default low-privilege account on a LiteLLM proxy can climb to full admin and run code on the server by chaining three vulnerabilities, researchers at Obsidian Security disclosed LiteLLM is a widely deployed open-source AI gateway that brokers calls to more than 100 model providers behind one OpenAI-compatible interface. A server takeover exposes every provider key it holds, the secrets that

Council of Europe investigates ShinyHunters data breach claims

The Council of Europe, the continent's oldest intergovernmental body, is probing claims of a data breach made by the ShinyHunters extortion group over the weekend. [...]

20 years of Intel Macs: Why Apple switched, and why it switched again

Remembering the ups and downs of the Intel Mac era as it finally winds down.

Good news—we have extra time before the Sun ends life on Earth

Will the Sun roast Earth’s plants or starve them?

Docker joins the Athena coalition: a cross-industry collaboration for supply chain security

The obvious takeaway from 2026's biggest incidents is that attackers are increasingly using AI to move fast. Docker's CISO, Mark Lechner, wrote about this shift and what every engineering team should do now. What worries us is that the bar is about to drop further. For most of the last decade, finding a serious vulnerability...

TinyWind: A pixel pirate sailing game with real wind physics (380k+ kms sailed)

Comments

How memory safety CVEs differ between Rust and C/C++

Comments