Trending

OPA maintainers and Styra employees hired by Apple

Show HN: Anchor Relay – A faster, easier way to get Let's Encrypt certificates

Phone Searches at the US Border Hit a Record High

Ask HN: Why does the US Visa application website do a port-scan of my network?

Copilot broke audit logs, but Microsoft won't tell customers

How We Exploited CodeRabbit: From Simple PR to RCE and Write Access on 1M Repos

Without the Futex, It's Futile

China blocked all HTTPS connection abroad for 1 hour in midnight

The SSO Wall of Shame – Vendors that treat SSO as luxury feature

Hacker Laws: Kerckhoffs's principle

Best practices for handling third-party API credentials

Popular GitHub Action `tj-actions/changed-files` has been compromised with a payload that appears to attempt to dump secrets

Fired “Kill Switch” Programmer Faces 10 Years In Jail: What Went Wrong?

A DOGE staffer broke Treasury policy by emailing unencrypted personal data

TSA Says Its Credit Cards for Bomb-Sniffing Dogs Are Cut Off

US Attorney General Pam Bondi warns alleged vandals: “If you’re gonna touch a Tesla, go to a dealership, do anything, you better watch out because we’re coming after you.”

The 2FA app that tells you when you get `314159`

[R] How Pickle Files Backdoor AI Models—And What You Can Do About It

bitwarden

Save item

clients

Bitwarden client apps (web, browser extension, desktop, and cli).

anchore

Save item

syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

Mbed-TLS

Save item

mbedtls

An open source, portable, easy to use, readable and flexible TLS library, and reference implementation of the PSA Cryptography API. Releases are on a varying cadence, typically around 3 - 6 months between releases.

pluja

Save item

awesome-privacy

Awesome Privacy - A curated list of services and alternatives that respect your privacy because PRIVACY MATTERS.

trufflesecurity

Save item

trufflehog

Find, verify, and analyze leaked credentials

aquasecurity

Save item

trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

projectdiscovery

Save item

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

google

Save item

osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

pwndbg

Save item

pwndbg

Exploit Development and Reverse Engineering with GDB & LLDB Made Easy