Two new Java Cards reproduce the applet lifecycle and expose a T=0 transport bug. Hardware results, CPLC serials, regression ...

Long time no see!I haven't been able to update my note for a while, but I plan to start updating it again, so thank you for ...

Qwen playing Minecraft is a bit like an eager but very silly friend.

How to scale agentic AI coding assistants to 600+ engineers in a regulated enterprise, using governance, guardrails, curated ...

This week, updates related to "certificates" were released for Java, Node.js, Go, and Python respectively. While they may ...

Oracle patches critical Java vulnerability CVE-2026-91403, rated 9.1. Check affected versions and learn how to secure Java applications.

IntroductionOn October 21, 2026, the Node.js project disclosed CVE-2026-111497, an out-of-bounds write vulnerability in Google’s Brotli decoder used by Node.js and other software. The vulnerability is ...

"Overall, it was a really strange place, in a way that makes the pit of your stomach tense up, and makes you want to run away ...

ShinyHunters exploited three chained Oracle PeopleSoft flaws enabling unauthenticated server takeover, with attacks spanning ...

It said, “We have a problem here.” He had signed it eight times, using eight private keys that belonged to eMudhra, the ...

A chilling look at how eMudhra’s self-distributed keys exposed global trust, revealing systemic flaws in certificate audits ...

After the discovery of a "PHP2Shell" vulnerability that allows unauthenticated remote execution of server commands in PHP — ...