"Claude Cowork Exfiltrates Files"

Claude Cowork Exfiltrates Files

Claude Cowork is vulnerable to file exfiltration attacks via indirect prompt injection as a result of known-but-unresolved isolation flaws in Claude

#ai #security #agents #infosec

"European Commission issues call for evidence on open source"

LWN.net

European Commission issues call for evidence on open source

The European Commission has opened a

#eu #europe #opensource #sovereignty

"Safe Django migrations without server errors"

Loopwerk: Safe Django migrations without server errors

How to run schema-changing Django migrations safely, avoiding schema/code mismatches and server errors during rolling deploys.

#django #softwaredevelopment

"A post-American, enshittification-resistant internet"

A post-American, enshittification-resistant internet

Trump has staged an unscheduled, midair rapid disassembly of the global system of trade. Ironically, it is this system that prevented all...

I just had the time to listen to it now. He does indeed have plenty of valid points. #enshittification #internet #europe #openweb #society

"Google will now only release Android source code twice a year"

Android Authority

Breaking: Google will now only release Android source code twice a year

Instead of four times a year, Google will now only release Android source code to AOSP twice a year, once in Q2 and again in Q4.

And kids, this is just another example of why we need a viable alternative to the existing duopoly. #android #google #mobile #os #opensource

"Bye Bye Big Tech: How I Migrated to an almost All-EU Stack (and saved 500€ per year)"

Bye Bye Big Tech: How I Migrated to an almost All-EU Stack (and saved 500€ per year)

“Bye bye bye.” It took some time, and a serious amount of research, but I have finally crossed the finish line. I have officially migrated my d...

#buyfromeu

The books I enjoyed the most in 2025

The books I enjoyed the most in 2025 – Gonçalo Valério

#Books

"MongoBleed explained simply"

MongoBleed explained simply

CVE-2025-14847 allows attackers to read any arbitrary data from the database's heap memory. It affects all MongoDB versions since 2017, here's a si...

#security #infosec #netsec #mongodb

"Merry Christmas Day! Have a MongoDB security incident." https://doublepulsar.com/merry-christmas-day-have-a-mongodb-security-incident-9537f54289eb #security #infosec #netsec #mongodb

"Help my website is too small"

Luke Plant

Help my website is too small

How can it be a real website if it’s less than 7k?

#funny #bloat #web

"NPM Package With 56K Downloads Caught Stealing WhatsApp Messages"

NPM Package With 56K Downloads Caught Stealing WhatsApp Messages

#security #infosec #nodejs #npm

"Over 10,000 Docker Hub images found leaking credentials, auth keys"

BleepingComputer

Over 10,000 Docker Hub images found leaking credentials, auth keys

More than 10,000 Docker Hub container images expose data that should be protected, including live credentials to production systems, CI/CD database...

#security #infosec #dockerhub

More app recommendations The good part of having a personal blog is that I can write about whatever comes to my mind. Today I was thinking of how people find the software they use, how many people end up using the same apps because they don’t know any alternatives, and the fact that many creators (especially open-source ones) deserve more recognition. Over the years I already shared some of the software I use, and I’m […]

More app recommendations – Gonçalo Valério

#apps #software #Technology #tools

"GitHub Actions Has a Package Manager, and It Might Be the Worst"

Andrew Nesbitt

GitHub Actions Has a Package Manager, and It Might Be the Worst

GitHub Actions has a package manager that ignores decades of supply chain security best practices: no lockfile, no integrity verification, no trans...

#github #githubactions #security #supplychain

Fairphone open-sources Fairphone 5 and 6 software, and Moments switch https://www.fairphone.com/en/2025/12/04/were-big-fans-of-open-source-buildable-code-at-fairphone-heres-why/ 💪 Nice #fairphone #mobile #eualternatives #opensource

"When Password FieldsAren’t Enough – Client-Side SecretExposure in PagerDuty Cloud Runbook"

CVE-2025-52493: When Password FieldsAren't Enough - Client-Side SecretExposure in PagerDuty Cloud Runbook | Praetorian

#security #cybersecurity #infosec

"Critical Security Vulnerability in React Server Components"

Critical Security Vulnerability in React Server Components – React

The library for web and native user interfaces

#security #infosec #netsec #reaxtjs #javascript #npm