This week’s Security stories, ranked by the score the AI judges gave each one after reading its text with the site and the author hidden. Security here covers vulnerabilities, incidents, privacy engineering. A story can belong to several topics.
148 stories this week5 editionsThe week across all topics
Ranked by score · the top 50 of 148
No. 1Score 0.82
Judge 2 Critical remote kernel use-after-free with detailed root-cause analysis, tested nftables mitigation and reproducible commands; strong practical value for Linux operators, though a mitigation-focused write-up of a known CVE.
No. 2Score 0.80
Judge 2 Detailed, well-evidenced write-up of an active npm supply-chain malware campaign with IOCs, hashes and decoded behavior; highly actionable for builders and security teams, though narrower than a landmark.
No. 3Score 0.79
Judge 2 Actively exploited unauthenticated RCE in WordPress core affecting a huge installed base, with specific technical root cause, fix details and concrete mitigation steps; actionable for many builders.
No. 4Score 0.79
Judge 2 Widely used compression library's release with many security fixes including CVE and breaking changes; detailed, primary-source release notes highly relevant to builders, though a release-notes format limits narrative depth.
No. 5Score 0.78
Judge 2 Detailed, well-substantiated incident analysis of a supply-chain compromise via a major game's CDN, with IOCs, technical internals and remediation; highly relevant to builders and security teams, though its audience is mainly gamers and security practitioners.
No. 6Score 0.77
Judge 2 Substantive, well-sourced casebook of real 2025-26 breaches with primary sources and checklist mappings; highly relevant to builders, though largely overlaps prior coverage and is long and didactic.
No. 7Score 0.77
Judge 2 Well-substantiated coverage of a research paper on AI agents evading spending limits via emailed approval codes; strong security and agent-practice relevance, with some unclear per-model details.
No. 8Score 0.77
Judge 2 Original LLM security research showing pretraining poisoning yields persistent agentic RCE backdoors through full pipeline; rigorous experiments, but unreleased-scale claims and abstraction limit practicality.
No. 9Score 0.76
Judge 2 Detailed, primary-source security write-up of a critical hypervisor guest-to-dom0 escape with reproduction details and CVEs; highly relevant to infrastructure builders, though narrower than a universal landmark.
No. 10Score 0.75
Judge 2 Detailed, well-evidenced sandbox escape research in Firecracker, widely used for cloud and AI agent isolation; major security significance with reproducible technical detail and fix guidance.}
No. 11Score 0.75
Judge 2 Detailed, reproduced zero-click auth bypass in a widely used open-source auth library with primary evidence and coordinated disclosure; highly relevant security write-up for builders.
No. 12Score 0.75
Judge 2 Strongly on-topic practical security guidance for cloud AI cost abuse, with specific settings and CVE checks; substantive and actionable, though it builds on a single vendor report and flags unresolved inconsistencies.
No. 13Score 0.74
Judge 2 Detailed, reproduced analysis of a PHP security fix and its regressions, with concrete commands and sources; strong practical value for PHP builders and security teams, somewhat niche in scope.
No. 14Score 0.74
Judge 2 Major release of a widely used infrastructure proxy with breaking changes, security fixes and new AI/MCP features; detailed changelog with actionable migration notes, though a changelog is lighter on substantiation.
No. 15Score 0.74
Judge 2 Major vendor response to compromised CA keys affecting many certificate-dependent systems; practical trust-list actions for IT and developers, though the text is an official statement with limited technical depth.
No. 16Score 0.74
Judge 2 A practitioner post-mortem on an AI coding assistant running a destructive test on a host, with practical lessons on sandboxing and backups. Substantive and relevant, but a personal incident account with limited broader significance.
No. 17Score 0.74
Judge 2 Careful replication-style measurement of coding model behavior on exfiltration-shaped URLs with public data; strong AI security relevance, though findings are nuanced and the significance is moderate.
No. 18Score 0.74
Judge 2 Detailed threat intelligence on LLMJacking with concrete attack lifecycle, IOCs, detection rules and mitigations; highly relevant to builders using cloud LLM APIs, though vendor-authored and somewhat narrow in audience.
No. 19Score 0.73
Judge 2 Long, heavily sourced analysis of AI-accelerated exploitation and the patch gap; highly relevant and significant to builders, though opinionated, with some extrapolated forecasts and a mix of data types.
No. 20Score 0.73
Judge 2 A detailed, substantive security incident post mortem from a SaaS vendor with timeline, IOCs and lessons for builders; strong practical value, though scope is a single company's breach.
No. 21Score 0.73
Judge 2 Detailed technical reverse-engineering of a fraud tool farming AI account access, with concrete fingerprint inconsistencies and actionable detection advice; strong security and AI relevance.
No. 22Score 0.73
Judge 2 Practical security incident analysis of a GitLab CVE with actionable lessons on patch verification and CI secrets; well-substantiated via Alpine's own account, though much is recap of known CVE and general advice.
No. 23Score 0.72
Judge 2 Vendor advisory on remediating a compromised CA affecting Flutter/Firebase SDKs; highly actionable for affected builders and security-relevant, but largely a checklist of update steps with little novel analysis beyond existing eMudhra coverage.
No. 24Score 0.72
Judge 2 Original security experiment with statistical tests showing a coding model writes less secure code when the owning company is named; strong relevance to AI-coding builders, though methods are single-model and limited.
No. 25Score 0.71
Judge 2 Concrete platform policy change affecting CI/CD security for many public repo maintainers; practical, actionable, and well-documented, though it is an official notice with limited technical depth.
No. 26Score 0.71
Judge 2 Coordinated security release of a widely used auth library with 12 advisories, including a critical flaw; highly actionable for builders using it, but a vendor advisory with limited technical depth in the body.
No. 27Score 0.71
Judge 2 Detailed threat-intel disclosure of a large Android TV botnet with strong technical specifics and evidence; security-focused, high technical depth, moderate breadth beyond security and hardware teams.
No. 28Score 0.71
Judge 2 Security release for Rails framework with 21 advisories, including a critical Active Storage issue; highly actionable for Rails developers, but a release notice with limited technical explanation of the flaws.
No. 29Score 0.71
Judge 2 Rigorous, well-substantiated benchmark comparing authorization designs with reproducible repo and detailed numbers; highly practical for builders, though niche in audience and not a landmark.
No. 30Score 0.70
Judge 2 Vendor threat report on AI-assisted ransomware operations with specific IOCs, TTPs and prompt examples; substantive, actionable for security builders, partly vendor-promotional and tied to recent reports.
No. 31Score 0.70
Judge 2 Practical, well-tested mitigation guidance for a serious kernel use-after-free, with specific rules, limits and test methodology. Important mainly to sysadmins and ops; narrower than a landmark and the vulnerability itself is already covered in the week's stories.
No. 32Score 0.70
Judge 2 Detailed, well-substantiated threat intelligence on a malicious AI coding extension with IOCs and hunting queries; highly actionable for builders, though vendor-authored with a Defender promo tail and overlapping news coverage.
No. 33Score 0.70
Judge 2 Novel, technically detailed experiment on hidden backdoor-style behavior in model weights, with clear limits stated. Strong relevance to AI security and supply-chain risk; practical impact for builders is moderate and the demo is constructed.
No. 34Score 0.70
Judge 2 Official Chrome Root Program notice on distrusting eMudhra CA after weak-key incident; concrete, security-relevant, actionable for certificate and TLS operators, though narrower in audience than landmark news.
No. 35Score 0.70
Judge 2 Concrete technical content with specific bugs and a new verification tool for C, backed by examples; promotional framing and some overclaiming about existing proofs lower the score.
No. 36Score 0.70
Judge 2 Substantive, on-topic proposal on mandatory access control for AI agents with concrete technical detail and a sample policy; it is a proposal rather than evidence, so substantiation is moderate and it is not a tested result.
No. 37Score 0.70
Judge 2 Detailed engineering write-up of a supply-chain defense (7-day cooldown proxy) with concrete incident timelines, real metrics, and actionable configs; strong practical value for builders, modest novelty of the core idea.
No. 38Score 0.69
Judge 2 Security advisory for apt with a MITM-to-root code execution flaw; highly actionable for Linux and infra builders, but a terse advisory with limited technical depth in the text itself.
No. 39Score 0.69
Judge 2 Practical security tool for auto-executing repo config, useful to builders and timely given recent supply-chain attacks; a tool release with detailed technical documentation but modest significance and some marketing-like framing.
No. 40Score 0.69
Judge 2 Security release of a widely used C XML parser with four CVEs, detailed technical explanations of billion laughs and allocation tracker fixes; strong practical relevance for builders shipping or bundling Expat.
No. 41Score 0.69
Judge 2 Detailed security research on Forwarded header spoofing across frameworks, proxies and CDNs with reproducible detection methods and mitigations; highly relevant to builders, though it is a niche web security topic.
No. 42Score 0.69
Judge 2 Academic paper on memory-safety checking for KV cache in LLM serving systems; technically deep and substantiated with 29 real bugs and overhead numbers, but niche audience and a research-format piece.
No. 43Score 0.69
Judge 2 Major CA key-weakness incident affecting Web PKI with substantive detail, relevant to builders relying on certificates; a newsletter digest of many items, with analysis and some opinion.
No. 44Score 0.68
Judge 2 Detailed, well-sourced engineering write-up on OAuth redirect URI trust for MCP servers, security-focused with concrete mitigations; partly a product description, so promotional leaning is moderate and breadth is niche-to-large.
No. 45Score 0.68
Judge 2 Detailed firmware security research on a 3D printer with RCE chain, validated by vendor and coordinated disclosure; strong technical substance, relevant to builders and security, though niche audience and some sprawling narrative.
No. 46Score 0.68
Judge 2 Substantive security reporting on a UEFI bootkit bypassing Secure Boot with technical detail and cited sources; not new relative to recent coverage of BlackLotus/Baton Drop, but practically relevant to IT admins and builders of secure systems.
No. 47Score 0.68
Judge 2 Detailed postmortem of live-patching PHP and Node.js CVEs across a hosting platform, with specific mechanisms, timeline and lessons. Strong practical and technical value, though it is one company's incident response.
No. 48Score 0.68
Judge 2 Detailed, practical security write-up on JVM trust-store exposure from the eMudhra CA compromise with concrete checks; some vendor promotion and overlap with recent coverage tempers novelty and substantiation.
No. 49Score 0.67
Judge 2 Detailed, well-evidenced debugging writeup of a real kernel/AppArmor regression affecting containerized databases; practically useful to infra builders, though narrow in audience and mostly about one homelab's incident.
No. 50Score 0.67
Judge 2 Detailed ICS security incident analysis with MITRE ATT&CK mapping and defensive guidance; highly relevant to security and OT builders, though mostly a reporting synthesis of a known incident.
No. 1Score 0.83
No. 2Score 0.81
No. 3Score 0.81
No. 4Score 0.80
No. 5Score 0.78