🏢 Mastodon Organization

Microsoft recently patched a critical vulnerability in its M365 Copilot platform that could have let attackers steal two-factor authentication codes and other sensitive information from users’ emails.

Simon Willison describes two days of experience with Claude Fable 5 as “relentlessly proactive,” using a debugging session in Datasette Agent to show how far the model will go to solve a problem. Afte

The article argues that AI can create a new kind of “rockstar developer” problem: code that is produced quickly, looks impressive, but is difficult for teams to maintain. Jesse Skinner compares tradit

The page describes the **ornithos.report challenge archive**, a puzzle system built around archived “RFIs” derived from filed tearlines. Each RFI has a deterministic answer that solvers verify locally

Attached: 1 image DEF CON 34 is an electronic badge year, and we’ve got something very special in store, created for us by a hardware hacking legend. We can’t share too much at this juncture, but we

Security researcher Chaotic Eclipse has disclosed a Windows zero-day privilege escalation vulnerability, dubbed **MiniPlasma**, that can grant attackers **SYSTEM-level access** on fully patched system

Apple and Google are gradually expanding their use of hardware-based attestation. They're convincing a growing number of services to adopt it. Google's Play Integrity API and Apple's App Attest API ar

An open source package with more than 1 million monthly downloads, `element-data`, was compromised after attackers exploited a flaw in the developers’ GitHub-based workflow. The vulnerability let the

CackalackyCon 2026 is a hacker conference taking place May 15–17, 2026, in Durham, North Carolina. The event will be held at the DoubleTree near RDU Airport in Research Triangle Park, located at 4810