YouTube video by DEFCONConference

5K+ MCP servers analysis: 53% use insecure hard-coded credentials. Read the full 2025 research and download the open-source MCP Secret Wrapper to mitigate risks.

Overcoming Niantic's Anti Cheating Mechanism

DEFCON TV Channel 3: Track 3 Talks

A writeup on all challenges I solved in the 2025 OWASP CTF

Today we're announcing Integrations, a new way to connect your apps and tools to Claude. We're also expanding Claude's Research capabilities with an advanced mode that searches the web, your Google Wo...

A new proof reveals the answer to the decades-old “moving sofa” problem. It highlights how even the simplest optimization problems can have counterintuitive answers.

A roguelike minesweeper adventure

Brick your Steam Deck - one way or another…

This research shows what an attacker can achieve after creating a malicious OIDC identity provider in AWS and how they can do it. The article presents novel techniques and tools for persistence and ev...

Learn how small errors in OAuth implementation can lead to significant security vulnerabilities like one-click account takeover in web applications

DeepSeek My User Agent

Why does Git's autocorrect wait 0.1s before executing a mistyped command? Let's dig in.

Released in November 2001, the original Xbox was Microsoft’s first venture into the game console industry. With its hardware closely resembling a cheap but v...

An exposé no one will read, about the widespread falsification of user posts in PhysicsForums, a scientific community founded in 2001. This is a microcosm of the death of the human-written Internet.

I got OpenAI's o1 to play codenames and the results were surprisingly good

How Ben Hylak turned from ol pro skeptic to fan by overcoming his skill issue.

data:blog.metaDescription

Recently I came across a fantastic new paper by a group of NYU and Cornell researchers entitled “How to think about end-to-end encryption and AI.” I’m extremely grateful to see th…

Our impressions of Devin after giving it 20+ tasks.

Learn how to dynamically ban weak passwords from your environment with Microsoft Entra Password Protection

Posted by Joshua Bloch, Software EngineerI remember vividly Jon Bentley's first Algorithms lecture at CMU, where he asked all of us incoming Ph.D. ...

On November 20, 2024, Shubham Shah and I discovered a security vulnerability in Subaru’s STARLINK admin panel that gave us unrestricted access to all vehicles and customer accounts in the United State...

The primary goal of the

I wrote a (list of) regular expressions that will play a (not very good) chess game by running a 2-ply minimax search.

The primary goal of the

Some of the interesting and insane facts I learned about SQLite

No clustering algorithm is perfect and you must make a trade-off.

The very best work from our friends at competing publications.

People really need to stop blindly copying code from the Internet.

Security Vulnerability Report Overview This is a re-release version of 1.1.6 On 12/19/2024, 02:01 (UTC), we discovered that our npm packages @rspack/core and @rspack/cli were maliciously attacked. ...