Security — 12 posts
HOTBinance hot wallet breach: what Binance and the FBI said
Binance disclosed the Oct 29 hot wallet breach in four notices and the FBI named North Korea. Official statements by date, plus a wallet operator checklist.
HOTYou upgraded Node.js, so why is Brotli unchanged?
What does 'we upgraded to Node.js 22.23.4' prove? We split it into seven claims and tested each against official docs and our experiments.
HOTThe patch is out, so why isn't my server safe yet?
One question about Linux kernel TCP flaw CVE-2026-98432: what the fix waits for, package vs upstream commit, installed vs running kernel, containers.
HOTTampered Claude Code extension, dissected in six layers
Claude Code 2.1.312 and 2.1.313 on Cursor's marketplace weren't official builds. Docs and container tests trace one key line, one tunnel, one startup entry.
26.1% of 31,132 skills were vulnerable, so scan first
Where the 26.1% figure came from, and what NVIDIA's skill scanner SkillSpector sends off your machine and what it cannot see when scoring.
Cloudflare's audit skill has a second agent rebut each bug
A teardown of Cloudflare's open-source security-audit skill: what recon, ledger, hunters, verifiers, scripts and sandbox each receive and leave behind.
HOTRailway env vars may be exposed, what do you change first?
Some Railway environment variables were decrypted after access began Oct 20. A runbook covers rotation order, check commands and fixes for blocked deploys.
HOT1.4% of OpenCode users had AI keys stolen, how to rotate
Affects the 1.4% of OpenCode console users who stored Anthropic, OpenAI or Google keys. Three questions to find your keys, six rotation steps, vendor limits.
GitLab's perfect-score bug returned in 9 days, patch again
A perfect-score flaw lets anyone run code on self-managed GitLab without a login, 9 days after the last. Servers patched on Oct 12 must upgrade again.
HOTNode.js fixed 10 flaws, 4 are High, so upgrade now
Node.js 22.23.4, 24.22.1 and 26.12.1 fix 10 vulnerabilities (4 High). How each line is hit, what behaves differently now, and the copies a server update misses.