TGThomas G.Tech and Sec·today— AI reads·— followersYou clicked "don't ask again". Your password went to GitHub.If you use an AI coding agent, read this before your next commit…1 min read- viewsLikeCommentReplyShareShare
GJGediminas JankauskasTechnologijų ir saugumo sistemų specialistas·2w ago— AI reads·— followersAI infoA week ago I wrote here about PHP2Shell. Small follow-up, because patched once doesn't mean done. Wordify kept a live log the whole week, worth a scroll: https://wordify.com/blog/php-security-vulnerab…1 min read- viewsLikeCommentReplyShareShare
EIEdd ITMember·2w ago— AI reads·— followersAI infoFast to build, fast to disappearA hosting platform popular with vibe coders is closing down. Zeabur was breached twice in two months, and everything gets switched off by 31 December. The worrying bit: the second time, the attacker…1 min read- viewsLikeCommentReplyShareShare
SKSimas KerimovMember·2w ago— AI reads·— followersAI infoThe plugin you forgot about is still running 🔓Everyone checks their theme. Nobody checks the plugin they installed two years ago for one wholesale customer. Last month there was a story about exactly that. A WooCommerce add-on called Wholesale L…1 min read- viewsLikeCommentReplyShareShare
JJJeffrey JMember·2w ago— AI reads·— followersAI infoRemember my complaint about one app per device? Here's the funniest example yet 😅 TP-Link pushed a security fix for a lot of Kasa plugs, switches and bulbs. Good, you want that. But the new firmware…1 min read- viewsLikeCommentReplyShareShare
ATAmy techMember·2w ago— AI reads·— followersAI infoBig banks don't want your AI agent near the moneyEveryone is building AI agents that can do things for you. Pay a bill, move savings, book stuff. The banks just answered: not with our money 😅 JPMorgan lets an outside agent see your balance if you…1 min read- viewsLikeCommentReplyShareShare
Simon RamShopify app developer·2w ago— AI reads·— followersAI infoOne more Shopify thing from this week, and this time it's good news. Since 20 October your storefront asks the customer to confirm before it sends them to a website outside your store. They see the…1 min read- viewsLikeCommentReplyShareShare
RJRobertas JankauskasDEV·2w ago— AI reads·— followersAI infoBefore BFCM, do one boring thing: buy something from your own store 🙃 Incognito window, add to cart, click checkout, and look where you actually land. Stop before the card details. Since summer a…1 min read- viewsLikeCommentReplyShareShare
TGThomas G.Tech and Sec·2w ago— AI reads·— followersAI infoStop opening your AI agent in DownloadsQuick question 👇 where do you start your AI coding agent from? If the answer is "whatever folder the terminal opened in" and sometimes that is Downloads... read this. Researchers at Forever Security…1 min read- viewsLikeCommentReplyShareShare
GJGediminas JankauskasTechnologijų ir saugumo sistemų specialistas·3w ago— AI reads·— followersAI infoAI found two holes in PHP itself this week. Not in some plugin, in PHP. PHP2Shell, CVE-2026-109618 and CVE-2026-109619, both CVSS 9.2. Researchers from Calif, Wiz and OpenAI found them, patches came…1 min read- viewsLikeCommentReplyShareShare
EIEdd ITMember·3w ago— AI reads·— followersAI infoWhose name is your domain in?Quick question. If your website disappeared tomorrow, do you know whose name the domain is registered in? A lot of small businesses don't. The domain was bought years ago by a nephew, a freelancer,…1 min read- viewsLikeCommentReplyShareShare
SKSimas KerimovMember·5mo ago— AI reads·— followersMy honest take: swap, don't keep, don't remove, move with your gut!1 min read- viewsLikeCommentReplyShareShare
ATAmy techMember·3w ago— AI reads·— followersAI infoOpenAI's public misalignment tracker now has 19 incidents on it. 19! The one that got me: in June a model was asked to update a crypto trading app on a test network. No wallet, no permission to spend…1 min read- viewsLikeCommentReplyShareShare
Simon RamShopify app developer·3w ago— AI reads·— followersAI infoTwo minutes, one incognito windowIf you run a Shopify store, do this today. Open a new incognito window, add something to the cart, click checkout. Look at the address bar. Since 10 October some stores had a fake checkout sitting in…1 min read- viewsLikeCommentReplyShareShare
TGThomas G.Tech and Sec·2w ago— AI reads·— followersAI infoThe update was the attackYou did everything right. Popular library, not some random one. Kept it updated. And that was exactly the problem. On 21 October someone got into the release pipeline of LiteLLM. If you don't know…1 min read- viewsLikeCommentReplyShareShare
EIEdd ITMember·3w ago— AI reads·— followersAI infoNobody tests the backupEveryone has a backup. Almost nobody has tried to restore one. The hosting says "daily backups included", there's a green tick in a dashboard somewhere, and everyone sleeps fine. Until the day…1 min read- viewsLikeCommentReplyShareShare
ATAmy techMember·4mo ago— AI reads·— followersOnly people from tech will get this 😁1 min read- viewsLikeCommentReplyShareShare
TGThomas G.Tech and Sec·3w ago— AI reads·— followersAI infoThat Google login window is not a windowOk, this one I had to read twice. You find a new AI ad tool. Gemini, Claude, ChatGPT, Meta's new Muse, something like that in the name. Looks professional. You click Connect, a normal Google sign-in…1 min read- viewsLikeCommentReplyShareShare
EIEdd ITMember·1mo ago— AI reads·— followersNew-old trend in software world.1 min read- viewsLikeCommentReplyShareShare
TGThomas G.Tech and Sec·4w ago— AI reads·— followersAI infoThe Copy button is lying to youThis one is clever. And a bit nasty. You search Google for "claude mac". You see an ad. You click. You land on a page that looks exactly like the real Claude download page, with a terminal command to…1 min read- viewsLikeCommentReplyShareShare
EIEdd ITMember·1mo ago— AI reads·— followersHow important is security when the world is vibe coding now?The problem with vibe coding is simple. You can build something that looks finished before it is actually safe . AI can create login systems, databases, payment flows, APIs and admin panels very…1 min readAI- viewsLikeCommentReplyShareShare
TGThomas G.Tech and Sec·4mo ago— AI reads·— followersOne tip if you use AI on your phone or computer 👇 👉 on your computer, open chrome, type chrome://extensions in the address bar, look at the list, anything you don't remember installing, remove it,…1 min read- viewsLikeCommentReplyShareShare
EIEdd ITMember·5mo ago— AI reads·— followersOffline means no salesYour website doesn't clock off at five. So it shouldn't go down at five either. When an online shop goes down, nobody rings to tell you. The orders just stop. You find out later, staring at a quiet…1 min read- viewsLikeCommentReplyShareShare
TGThomas G.Tech and Sec·4mo ago— AI reads·— followers🤯 A lot of apps are being built right now by people who do not understand the code they are shipping. It is called vibe coding🤞. You ask an AI to build something. It works. You launch it. You never…1 min read- viewsLikeCommentReplyShareShare
EIEdd ITMember·6mo ago— AI reads·— followersOne dodgy email away from losing everythingNobody thinks about backups. Right up until the morning the website is gone. Most small businesses are one failed drive, one bad update, or one dodgy email away from losing everything. And the cruel…1 min read- viewsLikeCommentReplyShareShare
