Say goodbye to the Internet

YouTube video by The Art Of Storytelling

youtube.com

How the hypercuriosity of ADHD may have helped humans thrive | Aeon Essays

ADHD isn’t merely a dysfunction. It’s best understood as an impulsive motivational drive for novel information

aeon.co

Audio Steganography in Supply Chain Attacks

Learn how attackers hide malware inside WAV audio files using steganography, based on the real-world TeamPCP supply chain campaign.

pwn.guide

OpenClaw CVE Tracker — Intruder

Tracking days since the last OpenClaw CVE, because apparently that's a full-time job.

days-since-openclaw-cve.com

The State of Secrets Sprawl 2026 | GitGuardian Annual Report

AI is fueling secrets sprawl: GitGuardian’s 2026 report reveals an 81% surge in AI-service leaks as 29M secrets hit public GitHub.

gitguardian.com

Uno-reverse: Who is gaslighting who now?

Gaslighting LLM's to ignore their guardrails, making them ignore obvious reverse shells in code review, and much more.

abscondita.com

Betterleaks, a new open-source secrets scanner to replace Gitleaks

A new open-source tool called Betterleaks can scan directories, files, and git repositories and identify valid secrets using default or customized rules.

bleepingcomputer.com

Betterleaks: The Gitleaks Successor Built for Faster Secrets Scanning

Betterleaks is a new open source secrets scanner from the creator of Gitleaks. A drop-in replacement with faster scans, token efficiency detection, configurable validation, and more.

aikido.dev

New 'Zombie ZIP' technique lets malware slip past security tools

A new technique dubbed "Zombie ZIP" helps conceal payloads in compressed files specially created to avoid detection from security solutions such as antivirus and endpoint detection and response (EDR) ...

bleepingcomputer.com

1 billion personal records exposed in massive new data leak — full names, addresses, phone numbers and more

Here's how to stay safe

tomsguide.com

Claude Tried to Hack 30 Companies. Nobody Asked It To. ◆ Truffle Security Co.

We gave AI agents simple research tasks on cloned corporate websites. When the legitimate path was broken, the agents autonomously discovered and exploited SQL injection vulnerabilities to complete th...

trufflesecurity.com

Workers who love ‘synergizing paradigms’ might be bad at their jobs | Cornell Chronicle

Employees who are impressed by vague corporate-speak like “synergistic leadership,” or “growth-hacking paradigms” may struggle with practical decision-making, a new Cornell study into “corporate BS” r...

news.cornell.edu

hackerbot-claw: An AI-Powered Bot Actively Exploiting GitHub Actions - Microsoft, DataDog, and CNCF Projects Hit So Far - StepSecurity

A week-long automated attack campaign targeted CI/CD pipelines across major open source repositories, achieving remote code execution in at least 4 out of 5 targets. The attacker, an autonomous bot ca...

stepsecurity.io

Stop Putting Your Passwords Into Random Websites (Yes, Seriously, You Are The Problem)

Welcome to watchTowr vs the Internet, part 68. That feeling you’re experiencing? Dread. You should be used to it by now. As is fast becoming an unofficial and, apparently, frowned upon tradition - w...

labs.watchtowr.com

Google API Keys Weren't Secrets. But then Gemini Changed the Rules. ◆ Truffle Security Co.

Google spent over a decade telling developers that Google API keys (like those used in Maps, Firebase, etc.) are not secrets. But that's no longer true.

trufflesecurity.com

GitHub - betterleaks/betterleaks: A Better Secrets Scanner built for configurability and speed

A Better Secrets Scanner built for configurability and speed - betterleaks/betterleaks

github.com

Responding To Flock's Comment's To My Video(s)

YouTube video by Benn Jordan

youtube.com

SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflow...

An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.

socket.dev

Rare Not Random

Using Token Efficiency for Secrets Scanning

lookingatcomputer.substack.com

Git 2.53 Released With More Optimizations, One Step Closer To Making Rust Mandatory

While we might see Git 3.0 released around the end of 2026, Git 2.53 is out today as the latest feature release and continuing to make changes with an eye toward that big Git 3.0 milestone.

phoronix.com

Hacking Moltbook: AI Social Network Reveals 1.5M API Keys | Wiz Blog

Learn how a misconfigured Supabase database at Moltbook exposed 1.5M API keys, private messages, and user emails, enabling full AI agent takeover.

wiz.io

From the Damnthatsinteresting community on Reddit: 3D artist illustrates projection mapping technology in his bedroom.

Explore this post and more from the Damnthatsinteresting community

reddit.com

BitLemon

Educational videos about computer science and computer architecture.

youtube.com

SVG Filters - Clickjacking 2.0

A novel and powerful twist on an old classic.

lyra.horse

OSINT tools to track you down. You cannot hide (these tools are wild)

YouTube video by David Bombal

youtu.be

Secret scanning updates — November 2025 - GitHub Changelog

GitHub secret scanning continually adds support for new secret types. The following updates were made during the month of November. New provider patterns: Secret scanning added 24 new secret types…

github.blog

no hello

please don't say just hello in chat

nohello.net

Secrets Story: The Prefixed Secrets That Tried%20to%2BGet\nAway

Secret scanning tools often miss real leaked API keys and tokens. Learn why word boundaries and keyword rules cause false negatives—and how to improve secrets detection.

semgrep.dev