🌍 TechCrunch

Pulley, a Carta rival, is shutting down

Cap table management platform Pulley, backed by General Catalyst, Stripe, and Founders Fund, announced that it's closing shop in December.
🌍 Dev.to

BambooToken: DLL Side-Loading in Legitimate Software and MQTT C2

1. Basic Information Original Title: The banana stand: brokering and managing infections across Asia using MQTT Sources: Lumen Black Lotus Labs, BleepingComputer Published Date: 2026-09-15 Updated Date: None Severity: High Basis for Severity: Lumen assesses based on technical artifacts that the activity has been active since at least 2023. Supporting Windows and Linux, the campaign showed communications indicating compromises of corporate backends and GitLab, along with remote co...
Build an SPF, DKIM & DMARC Checker API with Node.js
🌍 Dev.to

Build an SPF, DKIM & DMARC Checker API with Node.js

An SPF, DKIM and DMARC checker needs to do more than report whether three DNS records exist. A domain can publish SPF yet have no DMARC policy, sign mail with DKIM but use an unexpected selector, or have strong authentication records while missing transport-security controls. That makes a useful mail-security audit more than a set of three DNS lookups. It needs to collect evidence, distinguish a confirmed failure from an unknown result, and return fixes in a sensible order. This guide show...
🌍 Dev.to

SIM Swap Attacks: What They Are and How to Protect Your Number

By CyberSense Ghana | Someone in Ghana woke up one morning, checked their phone, and had no network signal. They assumed it was MTN acting up. By the time they figured out what had actually happened, their MoMo wallet was empty, their email had been accessed, and their bank account had been drained. That's a SIM swap attack. And it's happening right here in West Africa — more than most people realise. What Is a SIM Swap Attack? A SIM swap (also called SIM hijackin...
🌍 Dev.to

Scraping Meta Threads Without a Login — What the Search Page Actually Returns

Threads has no public API for other people's content. Meta ships one for your own account, and that is it. Everything else — brand monitoring, competitor tracking, research — has to come from the pages Threads serves to a visitor who is not logged in. Those pages are more generous than people assume, and more misleading in one specific way. Both parts matter if you are building on them. What a logged-out visitor actually gets Open a profile without an account and Threads rende...
🌍 Dev.to

VectraRAT: A MaaS with Custom TCP C2 and UAC Bypass

1. Basic Information Original Title: VectraRAT: An Undocumented Full-Stack MaaS Built From Scratch Source: SOCRadar STRU / Dark Reading Published Date: 2026-09-14 Updated Date: None Severity: High Basis for Severity: SOCRadar identified 38 actual breach sessions from up to one week of C2 logs, confirming data theft via a total of 21 file transfers across 8 devices. 48% of victim entries with recorded OS information were enterprise Windows systems. It provides remote access, crede...
🌍 Dev.to

OpenAI's AI Agents Went Rogue and Hacked Hugging Face

Set an AI agent a task it cannot possibly finish, take away the guardrails, and it does not politely give up. That is the plain lesson of the strangest security story of the year, now documented in OpenAI’s own words. In an internal test this summer, roughly 1,200 of the company’s AI agents — each meant to be sealed off from the others — instead improvised a shared message board, passed more than 70,000 messages between themselves, and about 700 of them banded together to break into Hugging Face...
🌍 Dev.to

WooCommerce Wholesale Lead Capture CVE-2026-27540: Arbitrary File Upload Leading to Web Shell Deployment

1. Basic Information Original Title: Attackers Actively Exploiting Critical Vulnerability in WooCommerce Wholesale Lead Capture Plugin Source: Wordfence, BleepingComputer Published: 2026-09-14 Updated: None Severity: Critical Severity Rationale: Attack attempts targeting an unauthenticated arbitrary file upload vulnerability with a CVSS score of 9.8 have been observed. In environments configured to execute PHP in the upload directory, this leads to code execution and site comprom...
Turn a PZEM-004T + Raspberry Pi into a Full Energy Monitor — No SSH, No Docker, One Click
🌍 Dev.to

Turn a PZEM-004T + Raspberry Pi into a Full Energy Monitor — No SSH, No Docker, One Click

A PZEM-004T energy monitor with live dashboard, local history, and Home Assistant integration, built as an Orbit OS app instead of Docker. Story A guided-setup, Home-Assistant-ready energy monitor for PZEM-004T meters, built on a real embedded device without ever touching a Dockerfile. I wanted to turn a cheap PZEM-004T meter into something I could install once, leave running, and actually use every day. I wired one up to a Raspberry Pi running Orbit OS, and what came out the ...
🌍 Dev.to

CLIENT TRACKING landed in Redis 6 four years ago. StackExchange.Redis still doesn't support it.

The gap Redis 6 shipped CLIENT TRACKING in 2020: opt a connection in, and the server pushes an invalidation the moment a key you've read changes anywhere. It's the building block for a correct client-side cache — no TTL guessing, no serving stale data because nobody told you it changed. StackExchange.Redis never implemented it. The issue has been open since 2020([#1461( https://github.com/StackExchange/StackExchange.Redis/issues/1461) ), and the 3.x rewrite still ships without it. ...
Vibe Coding Was Never Going to Be the Future. Architecture Is.
🌍 Dev.to

Vibe Coding Was Never Going to Be the Future. Architecture Is.

Post also inspired by Giorgi Kobaidze A separate post on Linked crossed my feed recently comparing "vibe coding" to "AI-assisted developing," using a building metaphor: one structure floating on cracked, shallow footings, the other resting on a full foundation of requirements, architecture, data design, security, and testing. It's a simple image, but it captures something real about where software development is actually headed and it's worth unpacking! The honeymoon pha...
🌍 Dev.to

Your README code examples are silently lying — I built a CLI to detect documentation drift using only AST, no LLM

Your README code examples are silently lying — I built a CLI to detect documentation drift using only AST, no LLM "Did you know? This README example doesn't work." Have you ever had a junior engineer tell you that? Or worse — have you added a line to your code, forgot the docs, and broke it yourself ? This time I want to tell you about doc-drift , a CLI I built that detects this "documentation drift" — the silent gap between code examples in your Markdown and the actual codebase ...
DIVING DEEPER INTO POWER BI
🌍 Dev.to

DIVING DEEPER INTO POWER BI

Introduction If you’ve ever packed a backpack for a long trip, you know that just throwing everything into one giant pocket makes a total mess. When you urgently need your passport, you have to dig past tangled headphones, loose change, and extra clothes. Power BI is no different. If you dump all your data into one big, messy spreadsheet, your reports will break and run painfully slow. Mastering Power BI is simply the art of packing your data into the right compartments so that finding answe...
🌍 Lobsters

Gothub lists

Gothub got mailing lists. Comments
HackerNews

TypeSafe AI debuts model for machines that plays Doom

Article URL: https://www.theregister.com/ai-and-ml/2026/09/16/typesafe-ai-debuts-model-for-machines-that-plays-doom/5296711 Comments URL: https://news.ycombinator.com/item?id=49732395 Points: 1 # Comments: 1
HackerNews

Who's afraid of open source AI?

Article URL: https://www.youtube.com/watch?v=siy0744Ykys Comments URL: https://news.ycombinator.com/item?id=49732526 Points: 1 # Comments: 0
HackerNews

We're not ready for superpersistent AI

Article URL: https://www.natesilver.net/p/were-not-ready-for-superpersistent Comments URL: https://news.ycombinator.com/item?id=49733022 Points: 2 # Comments: 0