Blog
Latest articles on web hosting, cloud technology, e-commerce, and SaaS product development.
A new preprint forges 1024-bit RSA signatures without ever factoring the key — given temporary access to a raw signing oracle. Two conditions must both hold, which makes this an audit question rather than an emergency.
The percentage on your statement is easy to read and hard to feel. Here is the arithmetic that turns it into a monthly number — including the costs of doing it yourself, which most comparisons quietly leave out.
A disabled setting that changes the UI but not the capability is a false control. PromptArmor demonstrated Atlassian Rovo leaking Jira/Confluence data via prompt injection — even with web search off.
Six critical SQLite CVEs (CVSS up to 9.8) turned out to be AI-fabricated — fake patches, PoCs that don't parse. They still reached the NVD. The pipeline has no way to tell real from fake.
Hidden white-on-white text turns Copilot into a courier: it reads the instructions, then copies them into the document it writes. No malware, no attachment. 144 days on, still unmitigated.
An AI extended existing cryptanalytic tools against a NIST post-quantum candidate — a genuine result, not new mathematics. It also broke nothing anyone uses. Both halves of that sentence matter.
On July 27, automated vulnerability discovery hit 96% on a hard benchmark. The same day's actual breach needed no AI at all — just a missing auth check.
Updating to 6.9.5/7.0.2 shuts the entry point WP2Shell used — but it doesn't evict anyone already inside. Here's how to check whether your site is still owned.
A boring, pre-authentication RCE in the world's most popular CMS is being mass-exploited right now. Here's how WP2Shell works and exactly what to do today.
Showing 1–9 of 22 articles
Subscribe to get product updates, new features, and hosting tips.
