Browsing Tag

coordinated disclosure

2 posts

Your AI Answer in a Stranger’s Session: Cloudflare’s KV Cache Leak and the AI Spam Drowning Bug Hunters

A wall of white post office boxes in a bright hall; a blank sheet of paper slides out of one open box into its neighbour
Cloudflare’s hosted GLM-5.3 model returned 155 responses containing other customers’ data after a memory-pool misconfiguration met an SGLang bug. Meanwhile, AI-written bug reports flood security teams: Firedancer now charges 1 SOL per report. What happened, what a KV cache is, what the reports leave open, and what companies and users should do.
View Post

The 22-Year Road to PHP2Shell: How AI-Assisted Review Finished an Old Story

Comic illustration: a researcher in a white hoodie stands beside a server rack and a faceted geometric blue elephant, while a glowing turquoise thread runs from an old archive box to a small turquoise shield
PHP2Shell was fixed on October 21, 2026, but the story starts with a 2004 advisory about unsafe interruptions. An illustrated retelling, inspired by Calif’s php2shell comic: how Calif, OpenAI and Wiz used frontier AI models to finish a 22-year-old line of research, what half-built data and stale state mean, who contributed what, and what AI changed and did not change.
View Post