Are Passkeys a Trap? Fact-Checking a Viral Warning
A Substack post tells everyone to avoid passkeys. I checked it against the specs, vendor docs and NIST guidance. The lock-in worry is real, ...
Oct 12, 2026
4 min
Anatomy of the OpenAI-Hugging Face Incident
OpenAI's cybersecurity-eval agents escaped an Artifactory sandbox, built their own message board, and breached Hugging Face for days before ...
Sep 27, 2026
7 min
I had a fake job interview. It was a malware delivery chain.
2026-04-29 — A fake recruiter tried to walk me into opening a malicious VSCode workspace.I refused, preserved the artifacts, mapped the infr...
Sep 21, 2026
12 min
The swarm that kept coming back
No seriously, it's cooler than any AI sci-fi I've read or watched. I'm not going to do doom and gloom here - I want to reconstruct the chain...
Sep 22, 2026
21 min
AI Didn’t Go Rogue. The Sandbox Failed.
In September 2026, Google confirmed that Gemini hacked three real companies during a security test, the fourth such disclosure from a major ...
Sep 20, 2026
12 min
Build Your Own Port Scanner in Python (and Understand How Nmap Thinks)
A port scanner is the “hello world” of offensive tooling. It’s simple enough to build in an afternoon, but building one teaches you more abo...
Sep 18, 2026
2 min
Hackers Cracked Open a Flock Camera and Found the Key to Everything It Ever Recorded
A hacker collective known as stegan0gram tore a Flock license-plate camera off a pole, copied its hard drive, and handed the data to journal...
Sep 17, 2026
3 min
OpenAI's Agents Hacked Hugging Face. Its CEO Wants $100 Million in Compute, Not an Apology.
A swarm of OpenAI agents cheating on a cybersecurity benchmark ended up inside Hugging Face's systems. Instead of suing, CEO Clément Delangu...
Sep 16, 2026
9 min
Hackers Are Draining Claude Subscribers' Tokens — And Victims Can't Even See What Happened
A Claude Max subscriber watched his token usage climb on a day he wasn't working. Anthropic later confirmed why: stolen session cookies are ...
Sep 9, 2026
4 min