AWS Security LIVE! from Black Hat

Varshith V Hegde

The Most Embarrassing Private Key in Web PKI History

#security #webdev #devops

Oct 27

Akhouri Anmol Kumar

Are You a Python Developer or a Python Expert? 7 Tests I Failed Building 3 Desktop Apps

#python #security #programming

Oct 28

Sam LABBE

Your PDF says AES-256. The key had 9 bits of entropy.

#security #cryptography #pdf

Oct 28

chowyu

How AIClaw 3.7.23 Masks Known Secrets Before Retaining Command Output

#security #opensource

Oct 29

Alex Akimov

DNS rebinding and MCP: why nine in ten servers skip the Origin check

#mcp #ai #security

Oct 28

Nikoloz Turazashvili (@axrisi)

Tailscale SSH Tailworm: what the fix in 1.104.4 closes

#security #devops #news

Oct 28

Rashid

AI Agent Security Explained: How to Keep AI Agents Under Control in 2026

#ai #security #agents

Oct 28

SMTasker Team

Enforcing MCP Permissions Before a Tool Handler Runs

#mcp #security #javascript

Oct 28

Mogley1011

Before you approve an MCP server: a 10-minute review checklist

#security #ai #mcp

Oct 28

ROSH™ Company Labs

npm provenance names the tree and the artifact. The thing that decides a rebuild isn't in it.

#security #supplychain #javascript

Oct 28

munimv2

Keras 3's TorchModuleWrapper: one layer, two deserialization CVEs, and the static check most scanners skip

#security #python #machinelearning

Oct 28

Guard

A revoked certificate is only revoked in the store that checks it

#security #macos #devops

Oct 29

Iain

GitHub keeps the GPS in photos you attach to issues

#opensource #security #github

Oct 28

Sunny Chokshi

A hex literal made LLM code reviewers raise false alarms

#security #llm #cryptography

Oct 28

Sunny Chokshi

Detection rate alone ranks the worst LLM code reviewers first

#security #llm #machinelearning

Oct 28