"There were metal shavings found in bread products … products that were supposed to be dairy-free, that were not dairy-free, [which] were only caught by accident because somebody happened to put it together after their child or they themselves got sick, not because the company had worked it out."

Horse meat has been sold as minced beef or lamb in Australia, documents show

Government documents show hundreds of businesses operating in Australia have breached food safety laws, with one politician warning "you could be eating a minced horse".

abc.net.au

This is the coolest exploit I've seen on linux for a little while: copy.fail

Copy Fail — 732 Bytes to Root

CVE-2026-31431. 100% Reliable Linux LPE — no race, no per-distro offsets, page-cache write that bypasses on-disk file-integrity tools and crosses containers. Found by Xint Code.

copy.fail

Labor under internal pressure on gas tax as influencer says government ‘stopped working for the punters’

Labor under internal pressure on gas tax as influencer says government ‘stopped working for the punters’

Party’s environment action network tells parliamentary inquiry into gas export tax to consider ‘very substantial’ levy on windfall profits * Follow our Australia news live blog for latest updates * Get our breaking news email, free app or daily news podcast The Albanese government is facing internal pressure to raise taxes on gas companies as a prominent social media influencer warns Labor not to underestimate the scale of public outrage about the existing regime. Labor’s environment action network (LEAN) used evidence to a parliamentary inquiry into the tax settings for the gas sector to encourage the government to consider a “very substantial tax” on windfall profits. Continue reading...

theguardian.com

My first #PigeonSky post!!! 🪶 The pigeons where just minding their business and then the magpie came in and gave them a big scare

PSA for @statamic.com folks - update your sites ASAP! ⚠️ A CRITICAL vuln was discovered that allows full account takeover via password resets! 😱 All the details: cvereports.com/reports/CVE-...

CVE-2026-27593 - GitHub Advisory Database

Statamic is vulnerable to account takeover via password reset link injection

github.com

Shipping spaghetti is still shipping 😭

Tip I leaned today: Disable networking on your GH Action Tests Even if you block it in code, things could still leak

Anyone else's PHP github actions suddenly taking an insane time to complete? Mine are taking 20mins-1hr and I cannot replicate any problem on local or even brand new machines setup

kinda neat, I saw something else recently but in a code that compiles code that compiles other code nesting egg

Patrick C Miller@patrickcmiller.bsky.social · 8mo ago

GootLoader Malware Uses 500–1,000 Concatenated ZIP Archives to Evade Detection thehackernews.com/2026/01/goot...

We have another giveaway: a ticket to Laracon India 🎉. Since this is a last-minute giveaway, it is only open to people already basedin Ahmedabad, India, and it's only open until January 17th, 2026. Retweet/share for reach, and enter via our website, link below ⬇️.

Why governments need to treat fraud like cyberwarfare, not customer service cyberscoop.com/industrializ...

Why governments need to treat fraud like cyberwarfare, not customer service

Fraud has become industrialized and weaponized by syndicates and hostile states. This op-ed argues it’s a global security threat and outlines a new US-UK-backed public-private task force to fight it.

cyberscoop.com

gpg.fail

There should be a “same product, same features” law If a country forces a company to have better privacy options or allow third party app stores or whatever it might be, you should be forced to offer that same feature here in Australia

Reminder folks, chatgpt is designed to agree with you and "solve" issues so it rarely tells you that you're misunderstanding things. It will absolutely mislead you or say its found the issue when really it's just giving its best guess Getting tired of seeing low quality github issues hey

Stay safe friends

Ian Coldwater 🧊🚫@lookitup.baby · 10mo ago

A perfect CVSS 10 🧑🏻‍🍳💋 CVE-2025-55182: Unauthenticated remote code execution vulnerability in React Server Components The vuln is in versions 19.0, 19.1.0, 19.1.1, and 19.2.0: react-server-dom-webpack react-server-dom-parcel react-server-dom-turbopack Upgrade immediately!

My favourite part of the city is the KP cliffs. Absolutely stunning views 😍 Whenever I need time to myself, this is where I go

I wrote a research paper on this topic just last month This issue is entirely preventable. The only reason we keep seeing this style of attack is because our industry keeps repeating the same mistakes over and over again 😔

Patrick C Miller@patrickcmiller.bsky.social · 11mo ago

Malicious NPM Packages Disguised With 'Invisible' Dependencies www.darkreading.com/application-...

Whoa this is stunning

Chris Arter@arter.dev · 11mo ago

It's just a game.. It's just a game.. scope-creep.xyz

✨Microsoft security✨

tuckner@johntuckner.me · 11mo ago

My first response from VS Marketplace support is requesting supporting additional evidence I have that this listing is malware. If anyone can publish an extension with admittedly malicious intent with no response, what does that do for the health of the marketplace?

With the AWS outage, now‘s as good a time as any to post this old strip.

Working on Crypto in the #laravel world? Hit me up, I want to see what you're doing! I've got solana stablecoin p2p, offramps to banks and more going on over here 😍

Once upon a time, USBs and CDs could auto run. That’s how worms like stuxnet and Agent.BTZ spread everywhere We learned the hard way and killed autorun Now we `npm install` 1,000 different dependencies from the internet and consider it “safe”, forgetting that it does the exact same thing

Curious what it looks like to implement the new Inertia Infinite Scroll component? Have 3 minutes? That's all it takes. I whipped up a little demo: youtu.be/gQB6DdPHzSY

Infinite Scrolling with Laravel + Inertia

YouTube video by Laravel

youtu.be

Is username enumeration (UE) a real vulnerability? Yes, and it matters more today than it did a few years ago. As phishing attacks look more legitimate, even smart people are getting tricked This week I saw a UE+phish lead to an account take over, and the URL in the Phish was a legitimate url

If there is one thing I've learned in the last year, it's never use a property named "type" I have lost so many hours debugging this exact bug but alas I am a goldfish just did it again, for the third time this week 😭

This would have saved me a few hours making some things GDPR compliant!

Ash Allen@ashallendesign.co.uk · 12mo ago

I've just released v1.1.0 of my Redactable Models package! 🎉 You can now set the hashing algorithm that should be used by the "HashContents" redaction strategy. In this example, we're SHA256-ing the "name" and "email" fields of users who were soft-deleted over 30 days ago 😄

“Think like a hacker” is one of my favourite phrases It leads to the zero trust mindset. Assume a breach will happen and brainstorm what you can do to reduce that risk Short liven tokens are just one thing that can help. I encourage you to research OIDC tokens, it might just save you one day

Clara Leigh@clara42.bsky.social · last yr.

Today I leaned about OIDC tokens and how you can use them to prevent GitHub actions from having access to long lived secrets (like AWS) While its not yet supported by my main provider, I can certainly clean up my AWS actions and hope others add it to their roadmap 🙏 docs.github.com/en/enterpris...

I love a community that listens! Securing the supply chain is my current research topic and the more I learn, the more I find we can do

Joe Tannenbaum@joe.codes · last yr.

🔒 With everything going on with NPM, we're moving all over our Laravel packages over to Trusted Publishing Now you'll know where the latest release came from and you can verify that it was us.

🚨 Warning to #PHP package maintainers: We did not email you to change your passwords & 2FA. Emails asking you to update your credentials are a phishing attempt. We had the phishing site & domain taken down. If you got the email and entered your credentials, please contact us. #phpc