Deep dive and timeline of HF from OpenAI, Portswigger shows how CSS in webmail clients can be weaponized, GitHub’s platform improvements I hope you’ve been…
When models decide to find 0-days instead of solving a benchmark, using LLMs to extract EDR logic, Google’s AI security review skills and pipeline I…
Survey for AI-powered vulnerability finding harnesses, programmatically build complex decoy cloud environments, building hackbots I hope you’ve been doing well! Grandma Seems Chill In the…
Hackathon This week Semgrep friends have flown in from all over the world to crazily build together. Engineers, security researchers, designers, and, as we are…
Sandbox approaches by NVIDIA and Niel Provos, moar supply chain compromises, vulnerabilities in AWS Security Agent I hope you’ve been doing well! I Will Survive…
Brace Yourself, Conferences Cometh I’m excited for BSidesSF and RSA but phew, things have been busy If you’re flying in to San Francisco, safe travels!…
![[tl;dr sec] #326 - AI Auto Exploiting Vulnerabilities, GitHub RCE, Autonomous Cloud Hacking Agent](https://image.cybernoz.com/wp-content/uploads/2026/04/tldr-sec-326-AI-Auto-Exploiting-Vulnerabilities-GitHub-RCE-600x340.png)
![[tl;dr sec] #320 - Ramp's Security Agents, How Datadog Caught Malicious OSS Contributions, Obliterating Model Refusals](https://image.cybernoz.com/wp-content/uploads/2026/03/tldr-sec-320-Ramps-Security-Agents-How-Datadog-Caught-600x340.png)