A fake recruiter, a crypto repo, and a remote code execution payload hidden in a test file.
Free LinkedIn Profile Viewer — View Profiles Anonymously (2026)
View any LinkedIn profile anonymously without logging in. OutX's free profile viewer lets you research leads and competitors privately. No sign-up needed.
Zack Whittaker (@zackwhittaker@mastodon.social)
Another AI test gone awry, U.K. edition. "An agent tried to insert malicious code into an open-source project. In an attempt to get the code approved, the agent engaged in social engineering — creating fake online identities and using them to pressure the project's maintainer to approve the code." More: https://www.aisi.gov.uk/blog/incident-report-unsanctioned-agent-behaviour-during-cyber-testing
Keytrace — One identity, many proofs.
Link your GitHub, domain, and other accounts to your internet handle. Cryptographically signed, user-owned, and portable.
Anatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the July 2026 Incident
We’re on a journey to advance and democratize artificial intelligence through open source and open science.
I got targeted
Someone targeted me in an attempt to gain access or credentials because of my Open Source and/or consulting roles
A GitHub Issue Title Compromised 4,000 Developer Machines
A prompt injection in a GitHub issue triggered a chain reaction that ended with 4,000 developers getting OpenClaw installed without consent. The attack composes well-understood vulnerabilities into something new: one AI tool bootstrapping another.
What happened after 2,000 people tried to hack my AI assistant — Fernando Irarrázaval
I built hackmyclaw.com, where anyone could email Fiu, my OpenClaw assistant, and try to make it leak the contents of a secrets.env file.
Solving Fossil SCM's CAPTCHA in 171 characters | nns.ee
Ethical Hacking and Cybersecurity Blog
Download pumping: New npm deception technique for supply chain attacks
Learn how attackers exploit automated bot traffic as part of software supply chain attacks to artificially inflate download counters and mask malicious payloads as legitimate.
Sifa — Portable professional identity on the open web
Replace your LinkedIn URL with a portable profile that updates itself from your real activity across the open web. EU-hosted. Free. No lock-in.
Sifa — Portable professional identity on the open web
Replace your LinkedIn URL with a portable profile that updates itself from your real activity across the open web. EU-hosted. Free. No lock-in.
DecryptAds — From Hidden Flows to Public Insight
DecryptAds maps programmatic ad-tech supply chains from public files — ads.txt, sellers.json, and related signals — so you can trace hidden flows and surface invalid supply.
Nobody knows how the whole system works
One of the surprising (at least to me) consequences of the fall of Twitter is the rise of LinkedIn as a social media site. I saw some interesting posts I wanted to call attention to: First, Simon W…
PACT: Anonymous Credentials for the Web – Mozilla Hacks - the Web developer blog
A deeper look at PACT: a new initiative to tackle the rising tide of CAPTCHAs on the web whilst keeping the web open and preserving user's privacy.
Scam Number Check Free Reverse Phone Lookup - Who Called Me? | Malwarebytes
Check any phone number for scams, spam, and unknown callers. Our free reverse phone lookup tool identifies who called you. No signup required. Try it now.
CSP Bypass Search
A tool designed to help ethical hackers bypass restrictive Content Security Policies
