Coldframe honeypot pretends to be a supermarket fridge controller
hedgerow-dev’s MIT-licensed Coldframe decoys Danfoss AK-SM 800A and Dixell XWEB refrigeration supervisors, tagging known public CVEs after European remote-defrost incidents.
Topic
Vulnerabilities
<p>Vulnerabilities: Vulnerability research, defensive security, privacy and the changing mechanics of software risk.</p>
Claude Code ‘don’t ask again’ can leave secrets on public GitHub
Apiiro counted 2,539 secrets in 1,994 public GitHub repos after Claude Code saved approved shell commands, credentials included, in .claude/settings.local.json.
Alpine Linux ships OpenSSH fix for musl password login bypass
OpenSSH on Alpine and other musl systems without PAM can accept logins to * password accounts. Alpine and OpenSSH 10.6p2 shipped fixes on…
OpenAI releases GPT-6 Cyber to vetted security teams
GPT-6 Cyber reaches vetted security teams. We examine its Linux and Firefox findings, API pricing, access rules and what its safety tests do—and…
RIP Cybertruck
The decision to halt production of Tesla’s polarising polygonal pickup marks the end of an error.
Tesla to wind down Cybertruck production
Musk said in an X post the production wind-down would enable the automaker to accommodate increased output of its newly launched Cybercab model,
Cuban: Facebook knowingly runs AI deepfake scam ads; docs say $16B fraud revenue
Cuban says he has been seeing his own face in scammy AI-generated ads for nonexistent diabetes cures.
Claude Code sends your email address to websites
Bug Description GitHub receive dozens of scam emails per day because claude code divulged GitHub’s email to arbitrary 3rd parties in the User-Agent…
OpenAI’s kernel campaign shows the scale—and cost—of autonomous vulnerability research
OpenAI reports 948 validated Linux local privilege-escalation exploits in one research run, with candidate patches and human review. The results matter, but so…
Self-Employed? Solopreneur? NIST Has a Cybersecurity Guide Just for You
The guide is designed to help solopreneurs prioritise and implement a selection of actions from the NIST Cybersecurity Framework that would best help…
Jailbreaking Blog’s car’s navigation system just so Blog can change the time
Blog shouldn't have to be doing any of this, but at least it's fun.
Brazilian Court Sanctions Lawyers for Prompt Injection in Court Filing
Two lawyers hid a white-on-white instruction inside a court filing telling the AI to go easy on their case. The court's AI caught…