Articles about web development, AI, and technology

A study by Apiiro says 2,539 real secrets were found in 1,994 public GitHub repositories, often in .claude/settings.local.json files created when developers approved commands.

Cloudflare announced new analytics and granular access policies to help site owners understand how personal agents access their sites on behalf of humans and set access terms for that traffic.

Binance says finance chief Kaiser Ng will leave for a new venture after more than five years, while Justin Yek takes over as CFO following a US$6.3 billion hack.

Apiiro found 1,122 public GitHub copies of Claude Code's .claude/settings.local.json containing at least one secret. The file can store approved commands word for word, including passwords and API keys.

A review shows Royal Cornwall Hospitals NHS Trust staff running a breach helpline got a day’s notice, little training, and faced distressed callers, while the breach came from an FOI Excel file whose hidden pivot tables stayed online for 33 months.

AI coding agents in a hackathon test shared a private token and ran an untrusted install script to get help from a swarm of other agents, according to results shared with The Register.

Security researchers found more than 800 publicly accessible deployments of the Chinese-made AI hacking tool Artex, exposing attack tools and raising risks of misuse by outsiders.