Author
Jason Miller
8 min read
Lockfile Presence Is Not Execution: The First 60 Minutes of an npm Supply-Chain Alert
A lockfile hit proves exposure, not execution. Use this four-question decision tree for the first hour of an npm supply-chain alert, through secret rotation.…
14 min read
500 XSS Bugs, Zero Bounty Payouts: What Google's PageBreak Agent Does to the Price of Web Bugs
Google's PageBreak AI agent confirmed 500 plus XSS bugs using deterministic validation, not model confidence. What it means for AppSec and bug bounty economics.…
13 min read
One Key, Three Weeks, $600,000: Attackers Are Cashing Out AI Credits, Not Data
A stolen METR API key burned $600,000 in AI credits over three weeks. Learn how to scope, cap, and monitor LLM keys so one leak cannot drain your budget.…
12 min read
The Super Forms Exploit Needs Two Requests. Attackers Sent 440,000.
CVE-2026-14894 in Super Forms needs just two unauthenticated requests for RCE. Learn how the exploit works, why 440,000 attacks hit, and how to respond.…
10 min read
Same Extension ID, Different Code: What Actually Installs When Your Team Moves to Cursor
Cursor cannot use the Microsoft extension marketplace, so the same extension ID can resolve to different code. Learn the risks and how to audit your team.…
12 min read
Your Tools Automate Attacks. Schneier's DEF CON Talk Warns of Machines That Invent Them
Bruce Schneier's DEF CON talk warns that AI will invent attacks, not just automate them. Four concrete changes to threat models, testing, and retesting.…
11 min read
GitSpawn: The Git Performance Flag That Turns Coding Agents Into Command Runners
GitSpawn abuses the core.fsmonitor Git setting to run attacker commands when AI coding agents call git status. See affected tools, patch status, and defenses.…
11 min read
One Laptop, 469 Credential Hiding Spots: What the New Shai-Hulud Worm Is Really After
Shai-Hulud now scans 469 credential paths on developer machines. Learn where tokens hide, from npm configs to AI agent settings, and audit your own laptop.…
14 min read
An Agent Swarm That Takes Over the Internet Needs Four Capabilities. July's Sandbox Escape Proved One.
Dario Amodei warns an AI agent swarm could seize the internet within a year. Here is the four-capability scorecard, and what July's sandbox escape proved.…
11 min read
Patching Elementor Pro Doesn't Remove the Webshell. Here's How to Check
Patching Elementor Pro for CVE-2026-32475 does not remove webshells already dropped. Learn the log, filesystem, and WP-CLI checks that confirm compromise.…
10 min read
A Forgotten DNS Record Just Handed a Stranger Hundreds of Thousands of Military Base Call Logs
An orphaned DNS record gave a stranger hundreds of thousands of US military base call logs. Learn how telephony DNS fails silently and how to audit yours.…
7 min read
GPT-6 Astra Fell in Under 24 Hours to a Prompt With Nothing Malicious in It
GPT-6 Astra was reportedly jailbroken in under 24 hours using Task-in-Prompt attacks with no malicious instruction. Learn why static evals miss this class and.…