Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing... The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer. - TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely. - LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap. - OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for. These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure. foxio.io/blog/choose-your-ba…

אמלק: המצב הולך להיות גרוע יותר. השבוע קיבלנו הצצה לעולם שבו אייאיי חושף פירצות שהסתתרו בקוד ימים, חודשים ושנים. ביולי צייצתי על הזמן שלוקח למצוא חורים. ועכשיו? בתמונה. אז מה נסגר? למה בני אדם לא טובים בלכתוב ולבדוק קוד? ומה ההבדל בין אייאיי סייברי לסייבר עם אייאיי?>>

Anthropic is now recommending that companies REMOVE unnecessary subagents from their AI systems. This is a pretty significant shift in agent architecture, with their team finding that a single agent equipped with skills can frequently outperform complex multi-agent systems, and one customer seeing roughly 2x faster execution. The emerging rules of thumb: → Skills: Teach the agent HOW to do something, including procedures, expertise, and instructions. → Tools / MCP: Give the agent the ability to DO things through APIs, actions, and live data. → Subagents: Use for parallel work, isolated context, or tasks a single agent struggles with. The interesting part is progressive disclosure. Instead of spawning specialized agents or stuffing everything into a giant prompt, one agent discovers and loads skills and tools as needed. Their advice is to fold existing subagents into the main loop, turn their instructions into skills, expose their actions as tools, and run evals to see if performance holds up. As models have gotten smarter, improving agent architecture is becoming less about what you can add and more about what you can delete. claude.com/resources/article…

YES! It's out it's out, I am SO excited for this! #AWSLambda Web Functions are a game changer! A true HTTP request handler and Each execution environment handles multiple requests simultaneously (up to 128 concurrent requests per environment). Multi-region deploy, and so much more! -> aws.amazon.com/blogs/aws/ann…

כשהשיננית שואלת אותי שאלות באמצע הטיפול, איך היא מצפה שאענה לה?

למה זה כזה סיוט להתקין לינוקס למה למה

Was wondering where my disk space went. Therefore this exists now. You can simply wish software into existence.

איזה דור של גברים שBורים צומח לנו מתחת לסוליה של הכפכפים יה ווראדי. בלי עתיד בלי תקווה בלי חלום. *יובל מוסן, נווד דיגיטלי עידן הפודקאסטים נגמר עושה את קבוצות קצרות לעסקים #טיקטוקפריפריה_פודקאסטים

Our team at @Accomplish_ai was able to exploit a vulnerability in Cloudflare Containers that let a sandbox read other customers' files - SQLite DBs, Chromium profiles, .env files etc. Cloudflare Sandboxes and Browser Run run on the same disk implementation and were affected too. We reported this to @Cloudflare , who fixed it super quickly and professionally. Read @CloudflareDev post in collaboration with Accomplish researcher @orenyomtov on their official blog: blog.cloudflare.com/containe…