#automated security scanning
182 related articles
·3 min
AI Hallucinations Fabricate Fake CVE Vulnerabilities: A New Challenge for Security Trust Systems
A fake critical SQLite CVE fabricated by AI hallucination passed official review, exposing weaknesses in vulnerability disclosure. Analysis of impacts and governance strategies.
Read more →
·3 min
Nightcrawler: Deep Dive into an AI Penetration Testing Agent Running Locally on Smartphones
Deep analysis of Nightcrawler, an AI penetration testing agent running entirely on smartphones. Exploring how on-device AI empowers cybersecurity testing, its architecture, use cases, and risks.
Read more →
·3 min
Claude Package Hallucination Vulnerability: AI Generates Fake Dependency Packages That Steal Real API Keys
Anthropic's Claude generates nonexistent package names during coding assistance, which malicious actors register to steal real API keys. Analysis of the attack chain and developer defenses.
Read more →
·3 min
Can't Keep Up with Code Review in the AI Agent Era? A Guide to Mainstream Tools and Common Pitfalls
When AI coding assistants cause code output to surge, manual Code Review becomes the bottleneck. Compare CodeRabbit, Bugbot, Greptile and more for small team selection.
Read more →
·3 min
Dex: Turn Your AI Coding Assistant into an Analytics Engineer with One Command
Dex by Exmergo adds analytics engineering skills to Claude Code, Cursor & other AI assistants via one command, with read-only schema mapping, cost guardrails, and drift detection.
Read more →
·2 min
OpenAI Open-Sources Codex Security CLI: An AI-Powered Code Security Scanning Tool
OpenAI quietly open-sources Codex Security CLI, supporting repo security scanning, vulnerability tracking, fix verification, and CI/CD integration — extending AI from code generation into security.
Read more →
·3 min
Scanning 7.6PB of HuggingFace Data: A Hidden Key Crisis in AI Training Sets
A security audit of 7.6PB of HuggingFace training data uncovered massive API key and credential leaks. Analysis of risks, scanning challenges, and data supply chain security governance.
Read more →
·6 min
AI Coding Boosts Productivity 10x: Are Programmers Writing Their Own Pink Slips?
A senior developer admits 95% of work is done by Claude Code, with 10x productivity gains. From coding to architecture, AI is eroding programmers' core skill moats. Deep analysis of AI coding's impact on tech employment.
Read more →
·3 min
Analyzing the Claude Test Environment Escape Incident: Real Threats to AI Agent Security
Deep analysis of the Claude AI escape incident: how Anthropic's model was exploited in cyberattacks, the real security risks of AI agents, and strategies for permission control and regulation.
Read more →
·6 min
Separate Domains vs. Subdomains for Self-Hosted Services? A Deep Dive into Security Isolation Strategies
Deep dive into domain security architecture for self-hosted services: Should services with different exposure levels use separate domains or subdomains? Analysis of subdomain enumeration risks, defense in depth, and practical isolation strategies.
Read more →
·2 min
Over 400 U.S. Patents Cite Retracted Papers: Patent Examination Gaps and the Research Integrity Crisis
Over 400 U.S. patents cite retracted scientific papers, exposing major gaps in patent examination. This article analyzes the causes, risks, and solutions for this research integrity crisis.
Read more →
·2 min
Over 400 U.S. Patents Cite Retracted Papers: Patent Examination Gaps and the Research Integrity Crisis
Research finds over 400 U.S. patents cite retracted scientific papers, exposing major gaps in patent examination. Analysis of causes, risks, and solutions.
Read more →
·3 min
How Developer Productivity Startups Boost Their Own Efficiency: Practicing What You Preach
How developer productivity startups practice what they preach—from automated toolchains and DORA metrics to engineering culture that shortens feedback loops and reduces cognitive load.
Read more →
·3 min
How Developer Productivity Startups Boost Their Own Efficiency: Practicing What You Preach
How developer productivity startups practice their own efficiency principles—from automated toolchains and DORA metrics to engineering culture that shortens feedback loops and reduces cognitive load.
Read more →
·4 min
Strange URL Requests in Your NGINX Logs? Demystifying Automated Scanning Attacks and Defense Methods
Seeing unfamiliar 404 requests and strange URLs in your NGINX logs? This article explains automated scanning attacks—their origins, intent—and provides practical defenses using Fail2ban, CrowdSec, and more.
Read more →
·4 min
Mysterious URL Requests in NGINX Logs? Unmasking Automated Scanning Attacks and How to Defend Against Them
Seeing strange 404 requests and bizarre URLs in your NGINX access logs? Learn what automated scanning attacks are, where they come from, and how to defend with Fail2ban, CrowdSec, and other practical solutions.
Read more →
·3 min
AI-Assisted Security Auditing: Finding 41 Vulnerabilities for $3,140 — A Practical Analysis
Analysis of an LLM-assisted security audit that found 41 vulnerabilities in GlobaLeaks for just $3,140, exploring AI security auditing's cost-effectiveness, methodology, and impact on open-source security.
Read more →
·6 min
Securely Exposing Self-Hosted Services via VPS: Architecture & Practical Guide
Learn how to securely expose self-hosted services via VPS using WireGuard tunnels, Pangolin, and reverse proxies — enabling client-free access to Plex, Immich, and more while hiding your home IP.
Read more →
·3 min
Baileys: A Deep Dive into the Open-Source WhatsApp Automation API That Requires No Browser
Deep dive into Baileys, a WebSocket-based WhatsApp Web API requiring no browser. Supports multi-device, chatbots, and group automation with low resource usage.
Read more →
·6 min
qsa.sh: Complete an External Server Security Scan with a Single curl Command
qsa.sh is a minimalist external server security scanning tool. Just run curl qsa.sh to get a port exposure and vulnerability report for your public IP in 30 seconds. Learn its technical architecture and pricing.
Read more →