WebGPU Gives Websites Access to Your GPU. So Why Can’t a Page Read Your VRAM?

What I learned while trying to turn architecture diagrams into traceable security decisions and actionable engineering work.

Why I built an open-source RLS auditor after years of breaking into Supabase apps for a living.

How an attacker-controlled Galera node name resulted in arbitrary OS command execution across cluster members.

This one has a twist in it, so bear with the setup. The bug wasn’t hard to find. Getting it accepted was the actual fight.

How a missing validation check in Galera’s SST implementation allowed authenticated OS command execution.

This article discusses social-engineering lures that use explicitly themed material. To keep this write-up safe and readable for a general…

It looks like a normal flash drive. But instead of sending files to your computer, it can send something far more destructive

Maybe, it is listening now?