CodeQL 2.27.4 improves accuracy and query metadata

Who Gives A Crap? Hackers, apparently, after toilet paper maker's customer data exposed

UK shoppers caught up in third-party security mess, and nobody knows whether the data was flushed away

Learn Real-World Penetration Testing: Hands-On Ethical Hacking Crash Course

Understanding how malicious actors infiltrate networks is the first step to building resilient infrastructure. To help developers and aspiring security analysts learn the fundamentals of offensive sec

Pwn.college

pwn.college is a free, hands-on education platform for learning core cybersecurity and hacking skills, maintained by a team at Arizona State University. Learners progress through belt ranks, starting with a 'white belt' and earning belts through practice. Hackers continue beyond the platform to 'brown belt' and eventually 'black belt' status, which must happen outside the dojo. The site powers much of ASU's cybersecurity curriculum and asks users not to post writeups or walkthrough videos of challenge solutions. It points learners toward CTFtime.org for Capture The Flag events and a GitHub list of wargames for further practice. The underlying infrastructure is open source and accepts pull requests, though some modules remain closed-source.

Skills across coding assistants

I love Claude Code, but I use it so much that I regularly exhaust my weekly quota before the week ends. When that happens, I usually switch to other free-tier CLIs, e.g., Google Antigravity, GitHub Copilot, and, just last week, Mistral’s Vibe. I really wanted to try Vibe to evaluate the feasibility of moving away from Claude Code in favor of a more sovereign solution. Vibe only offers a single model by default, Mistral Medium 3.5.

A Little Snitch for Windows

PacketHound is a free outbound firewall for Windows. The first time an app tries to connect to the internet, it asks you: Allow or Block.

10 Best AI GitHub Repositories to Supercharge Your Agent

GitHub là kho lớn nhất chứa công cụ AI miễn phí nhưng phần lớn lập trình viên chưa khai thác hiệu quả. Các agent như Claude Code thường được cài đặt mà không tận dụng được nguồn tài nguyên phong phú trên GitHub. Các kho lưu trữ AI hàng đầu như LangChain, LlamaIndex hay AutoGPT cung cấp framework mạnh để xây dựng agent thông minh hơn. Việc kết hợp các công cụ này có thể tăng đáng kể khả năng xử lý và tự động hóa của ứng dụng AI.

Bài viết này giúp bạn khám phá 10 kho GitHub AI mạnh nhất để tối ưu hóa khả năng của trợ lý lập trình.

A Week of Symfony #1036 (November 2–8, 2026) (Symfony Blog)

This week, Symfony 5.4.56, 6.4.50, 7.4.23, and 8.1.11 maintenance versions were released with many security fixes for components such as Routing, Serializer, Config, and HtmlSanitizer. We also publish…

Comparing NL2SQL Tools That Integrate with MCP Clients

Compares MCP-capable NL2SQL tools by their question-versus-SQL contracts, security boundaries, authentication, and authorization for database access.