The privileged status of vulnerability reports has eroded as cheap LLM-generated bug reports flood security inboxes, shifting the bottleneck from finding issues to triaging noise. Maintainers now face…
A 29-year-old bug in the Squid web proxy, dubbed Squidbleed (CVE-2026-47729), can leak cleartext HTTP requests including credentials and session tokens to authorized proxy users. The flaw, discovered …
Drydock, a new open-source tool, runs autonomous coding agents like Claude Code and OpenAI Codex in hardware-isolated VMs on macOS, preventing compromised agents from accessing API keys, filesystems, …
A 29-year-old heap buffer overread vulnerability, dubbed Squidbleed (CVE-2026-47729), has been discovered in all versions of Squid Proxy in its default configuration. The bug, found by Anthropic's Cla…
A former student who once bypassed his school's Squid proxy now proposes eliminating HTTP_PROXY environment variables entirely through transparent proxying at the system level. The approach, implement…