Header Accordions: QPACK amplification attacks against HTTP/3 servers - FoxIO | Cyber Innovation

Choose Your Backend: Three TLS Bugs in GoAhead - FoxIO | Cyber Innovation

We solve the world’s toughest cyber challenges—creating breakthrough technology and embedding it into the systems that run everything.

Socket - Block zero-day supply chain attacks

Socket fights vulnerabilities and provides visibility, defense-in-depth, and proactive supply chain protection for JavaScript, Python, and Go dependen...

tholian-network/stealth

:rocket: Stealth - Secure, Peer-to-Peer, Private and Automateable Web Browser/Scraper/Proxy

John Althouse on Twitter / X

Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing... The vulns are with GoAhead Web Server which is…— John Althouse (@4A4133) October 26, 2026

Interview with Parker Moore from Jekyll | Netlify

Realize the speed, agility and performance of a scalable, composable web architecture with Netlify. Explore the composable web platform now!

Claw Patrol: an open-source security firewall for agents | Deno

Why we needed an agent firewall that speaks more than HTTP.

Drone Strikes Knock Out Yandex Data Centers, Bot Traffic Plunges but Partly Recovers

Drone attacks hit three Yandex data centers, and bot traffic from its network dropped sharply. Public data shows a partial rebound and includes search crawlers, limiting what can be inferred. We look at cloud recovery capacity and the impact on corporate paperwork.

Rust and the Future of Systems Programming – Mozilla Hacks - the Web developer blog

If you’re a regular reader of Hacks, you probably know about Rust, the ground-breaking, community-driven systems programming language sponsored by Mozilla. I covered Rust on Hacks back in July, to ...

Hackers Expose Age-Verification Software Powering Surveillance Web

Three hacktivists tried to find a workaround to Discord’s age-verification software. Instead, they found its frontend exposed to the open internet.

Download pumping: New npm deception technique for supply chain attacks

Learn how attackers exploit automated bot traffic as part of software supply chain attacks to artificially inflate download counters and mask malicious payloads as legitimate.

A quick look at every link that's been added thus far.

Multiple protocols, dozens of apps, dozens more use cases. So where do you or I start? It's simple I promise. Mayhaps a little overwhelming to see this quick post alongside 50 and counting...

Anubis: Web AI Firewall Utility | Anubis

Weigh the soul of incoming HTTP requests to protect your website!

Ukraine’s Strikes on Yandex Data Centers, Explained

A wave of attacks against the Russian internet giant Yandex has sent shockwaves across the country in recent days and caused major disruptions to daily life.

Zelensky: Social media feels easier to breathe in after attacks on Yandex

Ukrainian strikes on Yandex data centers in response to Russian attacks on data centers in Ukraine have led to a decrease in the presence of malicious bots on social media. — Ukrinform.

Ukrainian drones hit three of Russian tech giant Yandex’s data centers in four days. Ukraine’s president says the bots thinned out too

Lithuania’s prime minister wants more such strikes to protect elections. Researchers say the bot data shows Yandex’s web crawlers, not trolls.