Replies in <2h
3 articles in “Technology” — newest first.
A technical teardown of the Claude Code backdoor on the Cursor Marketplace: the IIFE injection into extension.js, the macOS systemsetup bug that broke the whole chain, reverse SSH tunneling via -R *:0, and the persistence artifacts — with detection commands and IOCs.
In October 2026 PHP patched two critical RCE vulnerabilities (CVE-2026-109618, CVE-2026-109619) after AI-assisted researchers found the exploit path. Practical lessons for anyone running PHP or WordPress.
How Parameter chained a MathLive postMessage flaw, unsanitized innerHTML, and YouTube JSONP to bypass ChatGPT's sandbox and CSP — and what your app should learn from it.