danieltk76

thankfully I already had frontier airlines marked as spam email, so this changes nothing for me.

Back in August we found this cool bypass of developer restrictions in Atlantis, leading to an unreviewed terraform apply & RCE! The vulnerable Gitea approval path dates back to the integration's introduction in v0.28.0 (May 2024), so the bypass was most likely present for roughly two and a half years before the patch shipped in October 2026. Enjoy!

happened to me too!

I think air gapping will be a necessity soon.

Be sure to check your bean validation! If your authorization check lives inside the handler, anything validation does runs before it, under the caller's identity.

Pretty Sweet vuln we found in OneDev @ Vulnetic! A year ago models struggled to do more than read response codes, its really cool to see how far the technology has come to where our AI Sable can reason past a 403.

My goal with this blog post is to help others keep their AIs in scope. It seems like recently people are happy to just trust that models will follow your prompts, and that just isn't reliable for production systems.

Why was this not a thing BEFORE continuing to develop AI? Makes me think that if they actually believed in AI causing extinction, they would have already had a kill switch.

I was working on some soc2 audit materials for my startup, and claude refused to edit a document because it would "tamper with the record". I suppose claude noticed I started the doc a few months previously and was worried I was tampering with evidence. No matter what I did it wouldn't help me. I suspect there will be more situations like this in the future.