[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"posts-first-page-security-all":3},{"items":4,"nextCursor":24},[5,19,29,37,46,54,61],{"_id":6,"text":7,"link":8,"linkTitle":9,"linkImage":10,"tags":11,"feedId":15,"sourceName":16,"publishedAt":17,"likes":18},"6ad9c99fae7b1610033c7004","Researchers using OpenAI’s GPT-5.6 Sol and other AI models disclosed two PHP-engine memory-corruption vulnerabilities, CVE-2026-109618 and CVE-2026-109619, that allow unauthenticated exploitation against major CMSs. The coordinated response across the PHP ecosystem shows AI can accelerate security audits, but developers should monitor patches and update their PHP installations promptly.","https:\u002F\u002Fwww.latent.space\u002Fp\u002Fainews-openais-patch-the-planet-program","PHP core memory-corruption bugs (PHP2Shell) disclosed via AI-assisted research","https:\u002F\u002Fres.cloudinary.com\u002Fdqjivljzi\u002Fimage\u002Fupload\u002Fv1792657823\u002Fdev-blog\u002Fpreviews\u002Fymc19phwmkqkzyauniju.png",[12,13,14],"security","backend","web-platform","6aca13e059e75549a15c6fa5","Latent.Space","2026-10-22T07:42:44.000Z",0,{"_id":20,"text":21,"link":22,"linkTitle":23,"linkImage":24,"tags":25,"feedId":26,"sourceName":27,"publishedAt":28,"likes":18},"6ad7d2e1bd260d709e4b551a","A security incident involving the EMudhra intermediate certificate authority has been disclosed. The compromise could affect trust chains for TLS connections that rely on this CA. Developers should review any services using certificates issued by EMudhra and consider re-issuing or revoking affected certificates.","https:\u002F\u002Femudhra.we-have-a-problem.com\u002F","EMudhra Intermediate CA Compromise reported",null,[12,14],"6aca13e059e75549a15c6fa3","Hacker News","2026-10-20T13:58:33.000Z",{"_id":30,"text":31,"link":32,"linkTitle":33,"linkImage":34,"tags":35,"feedId":26,"sourceName":27,"publishedAt":36,"likes":18},"6ad290797aef68749bb310c0","Anthropic published a paper tracing the historical origins of the elliptic curve used in ECDSA signatures. The analysis details how the curve was selected and its cryptographic properties, which can inform security reviews and key generation practices for developers handling digital signatures.","https:\u002F\u002Fwww.anthropic.com\u002Fresearch\u002Fecdsa-curve-origins","Claude research reveals origins of the ECDSA curve","https:\u002F\u002Fres.cloudinary.com\u002Fdqjivljzi\u002Fimage\u002Fupload\u002Fv1792184440\u002Fdev-blog\u002Fpreviews\u002Ftfywdaxfwrzxnaswdznw.jpg",[12],"2026-10-16T18:55:59.000Z",{"_id":38,"text":39,"link":40,"linkTitle":41,"linkImage":42,"tags":43,"feedId":26,"sourceName":27,"publishedAt":45,"likes":18},"6acfd15b0454dd1f23efb9d1","A recent article argues that passkeys, the password-less authentication method, are safe to adopt and not a hidden risk. It explains how the protocol works, the threat model, and why developers can integrate passkeys without compromising user security. Understanding this helps frontend teams implement modern, phishing-resistant login flows.","https:\u002F\u002Fscotthelme.co.uk\u002Fpasskeys-are-not-a-trap\u002F","Passkeys are not a trap - security considerations for web developers","https:\u002F\u002Fres.cloudinary.com\u002Fdqjivljzi\u002Fimage\u002Fupload\u002Fv1792004442\u002Fdev-blog\u002Fpreviews\u002Fa67stlfpk8kwarwez36h.png",[12,14,44],"frontend","2026-10-14T15:15:45.000Z",{"_id":47,"text":48,"link":49,"linkTitle":50,"linkImage":24,"tags":51,"feedId":26,"sourceName":27,"publishedAt":53,"likes":18},"6acf60daf235b635efd94129","A recent post on Hacker News described how the author's site was overwhelmed by AI-generated bot traffic after sharing the link. The surge highlights the need for developers to consider bot mitigation and traffic analysis when publishing content, especially as AI tools become more accessible.","https:\u002F\u002Fwww.sammystraus.com\u002F#i-posted-to-hn-and-then-my-website-was-flooded-with-ai-bot-traffic","Website flooded with AI bot traffic after Hacker News post",[12,52,14],"ai","2026-10-13T15:25:50.000Z",{"_id":55,"text":56,"link":57,"linkTitle":58,"linkImage":24,"tags":59,"feedId":26,"sourceName":27,"publishedAt":60,"likes":18},"6acd2ac6c1785074f1276ee2","A recent article discusses how browser fingerprinting is being used as an alternative to cookies for tracking users. Developers should be aware of the technique because it impacts privacy considerations, consent handling, and may affect how analytics and authentication are implemented on the web.","https:\u002F\u002Froyfish.dev\u002Ffingerprints-are-the-new-cookies","Fingerprinting emerges as a replacement for cookies",[14,12],"2026-10-11T22:33:39.000Z",{"_id":62,"text":63,"link":64,"linkTitle":65,"linkImage":24,"tags":66,"feedId":26,"sourceName":27,"publishedAt":67,"likes":18},"6acd2ac7c1785074f1276ee4","A recent article argues that passkeys may introduce security risks and advises against their use. Developers should be aware of the potential pitfalls when considering passwordless authentication for web applications.","https:\u002F\u002Fnonfunctional.substack.com\u002Fp\u002Fpasskeys-are-a-trap-do-not-use-them","Passkeys are a trap - security concerns raised",[12,14,44],"2026-10-11T21:59:48.000Z"]