Collaborate Disseminate
One of the hot topics currently is using LLMs for security research. Poor quality reports written by LLMs have become the bane of vulnerability disclosure programs. But there is an …read more Continue reading This Week in Security: The AI Hacker, FortMajeure, and Project Zero
We’re back! This week Jonathan chats with Mattias Wadman and Michael Farber about JQ! It’s more than just a JSON parser, JQ is a whole scripting language! Tune in to …read more Continue reading FLOSS Weekly Episode 842: Will the Real JQ Please Stand Up
The Internet is fighting over whether robots.txt applies to AI agents. It all started when Cloudflare published a blog post, detailing what the company was seeing from Perplexity crawlers. Of …read more Continue reading This Week in Security: Perplexity v Cloudflare, GreedyBear, and HashiCorp
The Tea app has had a rough week. It’s not an unfamiliar story: Unsecured Firebase databases were left exposed to the Internet without any authentication. What makes this story particularly …read more Continue reading This Week in Security: Spilling Tea, Rooting AIs, and Accusing of Backdoors
There was a disturbance in the enterprise security world, and it started with a Pwn2Own Berlin. [Khoa Dinh] and the team at Viettel Cyber Security discovered a pair of vulnerabilities …read more Continue reading This Week in Security: Sharepoint, Initramfs, and More
There’s a train vulnerability making the rounds this week. The research comes from [midwestneil], who first discovered an issue way back in 2012, and tried to raise the alarm. Turns …read more Continue reading This Week in Security: Trains, Fake Homebrew, and AI Auto-Hacking
This week Jonathan and Katherine talk with Jamie Abrahams about Drupal, and how AI just makes sense. No, really. Jamie makes a compelling case that Drupal is a really good …read more Continue reading FLOSS Weekly Episode 841: Drupal and AI: The Right Tool for Everything
@jack is back with a weekend project. Yes, that Jack. [Jack Dorsey] spent last weekend learning about Bluetooth meshing, and built Bitchat, a BLE mesh encrypted messaging application. It uses …read more Continue reading This Week in Security: Bitchat, CitrixBleed Part 2, Opossum, and TSAs
This week Jonathan chats with Joseph P. De Veaugh-Geiss about KDE’s eco initiative and the End of 10 campaign! Is Open Source really a win for environmentalism? How does the …read more Continue reading FLOSS Weekly Episode 840: End-of-10; Not Just Some Guy in a Van
Anthropic has had an eventful couple weeks, and we have two separate write-ups to cover. The first is a vulnerability in the Antropic MCP Inspector, CVE-2025-49596. We’ve talked a bit …read more Continue reading This Week in Security: Anthropic, Coinbase, and Oops Hunting