🔥 ข่าวด่วน: tag/infosec - ประเด็นร้อน

Level UI • 23 hours • in Articles • 9 min read

An MCP server is not a new API. It is a thin layer over the one you already have

Somewhere in the last year, "do we need an MCP server?" joined the list of questions that arrive in a brief before anyone has said what the thing is for. It is usually framed as MCP vs API, as though the Model Context Protocol were a newer kind of AP...

9 Reactions 7 Comments

Tom Smithverified • Sep 14 • in Articles • 4 min read

Gravwell AI Security Agents Have One Hard Limit. Everything Else Is a System Prompt They Can Ignore.

An alert fires in one of Gravwell's own data centers at 3 a.m. Before PagerDuty wakes anyone up, an agent runs a set of scoped queries, pulls together enough context to orient a half-asleep analyst, and drops a plain-language playbook in Slack. By th...

3 Reactions 0 Comments

Tom Smithverified • Sep 8 • in Articles • 4 min read

Finite State's Larry Pesce: Attackers Are Coming Back for Infrastructure Everyone Forgot to Watch

Over the past week, attackers have been hijacking MikroTik routers at scale, exploiting a chain of RouterOS vulnerabilities CERT Polska calls "MikroTrick." Two flaws, an SSH authentication bypass and a privilege escalation triggered by a specially cr...

0 Reactions 0 Comments

Tom Smithverified • Aug 27 • in Articles • 4 min read

AI Can Find Your Vulnerabilities. It Still Can't Own What Happens Next

Earlier this year, Anthropic gave Apple, Microsoft, Google, Amazon and a handful of other companies access to an AI agent called Mythos and turned it loose on their code. Project Glasswing, as the initiative became known, found bugs that had survived...

8 Reactions 3 Comments

kkieriiverified • Jun 16 • in Discussions • 1 min read

I Handed Claude Code the Keys. Turns Out I'm Not the Only One Using Them.

forumDiscussion group2 participants

2 Reactions 2 Comments

Ruyynn • May 2 • in Articles • 1 min read

Understanding HTTP Request Smuggling Beyond the Basics

HTTP Request Smuggling is often described as a technique to bypass WAFs or exploit parsing inconsistencies. That explanation is technically correct, but incomplete. The real issue is not about crafted payloads. It is about how different components i...

7 Reactions 2 Comments

Ruyynn • Mar 31 • in Articles • 1 min read

I Built an OSINT Tool to Automate Recon Across 100+ Platforms

!GhostIntel CLI output showing username search resultshttps://dev-to-uploads.s3.amazonaws.com/uploads/articles/racvuywo7qucvkx79fd7.png Manual reconnaissance is slow, repetitive, and honestly… pretty inefficient. So I built GhostIntel — a lightwe...

1 Reactions 0 Comments

Tom Smithverified • 19 hours • in Articles • 9 min read

Developer Weekly Briefing — October 30, 2026

Security dominated this week, but not in the usual way. Two active campaigns turned GitHub configuration files into attack surfaces. Researchers demonstrated that the built-in browsers inside AI coding tools can read your SSH keys. And at Oracle AI ...

6 Reactions 3 Comments

Muhammad Ali Khan • Jan 7 • in Articles • 3 min read

Human-in-the-Loop AI - The New Attack Surface in Industry 5.0

7 Reactions 2 Comments

Welcome to Coder Legion

Connect with 5,751 amazing developers

Don't have an account? Sign up

OR

Recent posts tagged infosec