The control worked. That’s the problem.

Browse by subject

The security beat, sorted by how much we’ve written about each.

• Cybersecurity50
• Cryptography16
• Vulnerabilities13
• Encryption11
• Exploits9
• Privacy7
• Privilege Escalation6
• CVE6
• Server Security5
• Penetration Testing3
• Cloud Security3
• Social Engineering3
• SQL Injections3
• SSL/TLS3
• RCE2
• Zero Trust2
• Phishing1
• Heap Overflow1
• Data Leaks1
• Timing Attacks1

Dedicated feeds

Three strands that run through the hub.

Vulnerabilities & exploits

A Password-Free Path to Root: Inside the macOS Screen Sharing Vulnerability Now Under Attack

A logic bug in screensharingd let attackers skip authentication entirely and land as root — no password required. Here's how it was found, patched, reverse-engineered, and finally weaponized.

14 Aug 2026 · 6 min read

• Januscape: A 16-Year-Old Linux KVM Escape Bug 4 Aug
• Minecraft Bedrock Server RCE: CVE-2026-55010 4 Aug
• OpenClaw Is Running on Your Machine Right Now. Here's What to Lock Down Before It Eats Your Credentials. 24 Jul
• See all →

Cryptography

RSA Is Simple. Deploying RSA Correctly Almost Never Is.

The capstone to our RSA series. The math checks out. Shipping it as written gets you breached. This is the nineteen-year-old attack that proves it, and what belongs in production instead.

31 Jul 2026 · 8 min read

• Claude Mythos vs. HAWK and AES: What It Found 30 Jul
• Microsoft's 2011 Secure Boot Certificates Are Expiring and Most Windows Users Don't Know It 4 May
• A Researcher Just Broke a 15-Bit Elliptic Curve Key on a Quantum Computer. Here's Why That Should Concern You. 4 May
• See all →

Attacks & defence

Zero-Trust Access for Homelabbers: Teleport vs. Tailscale vs. WireGuard vs. Cloudflare Tunnel

Four tools solve four different problems that all get pitched as the same problem. Here's what each one does, where each one breaks, and the combination that covers a real homelab without paying an SSO tax you didn't see coming.

19 Aug 2026 · 5 min read

• Hacktivism, 2021 to Today: From Steel Mills to Power Grids 14 Aug
• Zero Trust Everything: The Complete Guide to Self-Hosting Teleport for Secure Infrastructure Access 20 Jul
• What is Privilege Escalation? How Attackers Go From Foothold to Full Control 10 Oct
• See all →

Newest first.

Self Hosting

Zero-Trust Access for Homelabbers: Teleport vs. Tailscale vs. WireGuard vs. Cloudflare Tunnel

Four tools solve four different problems that all get pitched as the same problem. Here's what each one does, where each one breaks, and the combination that covers a real homelab without paying an SSO tax you didn't see coming.

Self Hosting

The SSO Tax: Why Self-Hosted Projects Are Gating Login Behind a Paywall

A growing list of open-core self-hosted projects, from Grafana to Planka, gate single sign-on behind an Enterprise tier. Here's which protocol actually gets paywalled, and what to check before you deploy.

Forum Archaeology

phpBB vs. SMF vs. MyBB: Three Very Different Fates

Forum Archaeology #2. Three free PHP forum platforms started from the same premise a generation ago. One got hit with a CVSS 9.8 authentication bypass this June. One had eleven CVEs last year. One has stayed almost quiet. Same premise, three completely different fates.

Cybersecurity

A Password-Free Path to Root: Inside the macOS Screen Sharing Vulnerability Now Under Attack

A logic bug in screensharingd let attackers skip authentication entirely and land as root — no password required. Here's how it was found, patched, reverse-engineered, and finally weaponized.

Cybersecurity Featured

Hacktivism, 2021 to Today: From Steel Mills to Power Grids

Part 1 ended on a 70-gigabyte breach in 2021. Since then, hacktivists derailed trains, dumped molten steel on camera, and reached grids in three countries.

Self Hosting

Cloudflare OS: Inside the Open-Source Agent Sandbox

Cloudflare open-sourced its internal AI workspace. A technical breakdown of Dynamic Workers, Gatekeepers, capability-based access, and what it takes to self-host it.

Forum Archaeology Featured

The Slow Death of vBulletin, and Why It Isn't Over

Forum Archaeology #1: I built plugins for this software when it ran half the internet's communities. Sixteen years after the exodus that should have killed it, vBulletin is still getting hit with critical, unauthenticated remote code execution.

Cybersecurity

Januscape: A 16-Year-Old Linux KVM Escape Bug

CVE-2026-53359 lets a guest VM crash or potentially root your Proxmox host, and it hid in KVM's shared code for 16 years. What to patch and how to check.

Cybersecurity

Minecraft Bedrock Server RCE: CVE-2026-55010

CVE-2026-55010 lets an attacker take over your Bedrock server with one packet, no login required. What it actually affects, and how to patch it today.

Artificial intelligence Featured

Ghost in the Shell Predicted Prompt Injection in 1995

Ghost Check #1: the Puppet Master hacked minds by exploiting the gap between what a system experiences and what it can verify. Thirty-one years later, a researcher did the same thing to Microsoft 365 Copilot with a single email.

Cybersecurity

Claude Mythos vs. HAWK and AES: What It Found

Claude Mythos halved HAWK's effective key strength and sped up an AES attack 200-800x. What the math actually shows, and what it doesn't mean yet.

Artificial intelligence

OpenClaw Is Running on Your Machine Right Now. Here's What to Lock Down Before It Eats Your Credentials.

Here's the complete patch-status and lockdown guide, including the systemd hardening, origin validation, env-variable command injection fix, ClawHub skill safety, and how to tell if you've already been hit.

Self Hosting

Zero Trust Everything: The Complete Guide to Self-Hosting Teleport for Secure Infrastructure Access

CoderOasis runs Teleport internally for everything — admin panel access, secure database connections, Kubernetes, and zero-trust philosophy across our entire team. This is the complete technical guide to installing, configuring, and running your own self-hosted Teleport cluster from scratch.

Cybersecurity

Microsoft's 2011 Secure Boot Certificates Are Expiring and Most Windows Users Don't Know It

Microsoft is displaying escalating Secure Boot warnings starting May 13 (Windows 10) and May 16 (Windows 11). The original 2011 certificates expire in October 2026. Unpatched systems may refuse to boot. Here's the full technical picture and what to do.

Cybersecurity

CVE-2026-41940: The cPanel Authentication Bypass That Runs 70 Million Domains and Is Being Weaponized Right Now

CVE-2026-41940 is a CVSS 9.8 authentication bypass in cPanel/WHM affecting every version after 11.40. It was a zero-day for two months, 44,000 IPs are now scanning, ransomware has deployed, and a state-linked actor is hitting Southeast Asian government networks. Patch now.

Self Hosting

Vaultwarden vs Bitwarden vs 1Password (2026 Comparison)

Vaultwarden replaces Bitwarden's paid tiers for free. Here's the real feature comparison and our self-hosted setup guide.

Cryptography

A Researcher Just Broke a 15-Bit Elliptic Curve Key on a Quantum Computer. Here's Why That Should Concern You.

On April 24, 2026, Project Eleven awarded 1 BTC to researcher Giancarlo Lelli for breaking a 15-bit elliptic curve key on publicly accessible quantum hardware. Here's what that means, why the trajectory matters more than today's number.

Open Source

Microsoft Bought GitHub for $7.5 Billion and Has Been Slowly Wrecking It Ever Since

Linus built Git in 10 days. GitHub became where open source lives. Then Microsoft paid $7.5B, killed Atom, trained Copilot on your code, corrupted main branches with a merge queue bug, and folded the whole thing into CoreAI. Here's the full story.

Cybersecurity

CVE-2026-31431 "Copy Fail": How a 9-Year-Old Linux Kernel Bug Gives Any Local User Root in 732 Bytes

CVE-2026-31431 chains AF_ALG, splice(), and authencesn's ESN scratch write into a deterministic 4-byte page cache write that gives an unprivileged local user root. Full technical breakdown, exploit mechanics, detection, mitigation, and patch status per distro.

Monthly Roundup

Monthly Roundup — April 2026

The six biggest articles from CoderOasis in April 2026 — local LLMs, self-hosted stacks, Claude Mythos breaking Firefox, the r/programming AI ban, Stable Diffusion, and the sandbox escape that changed everything.

Web Servers

How Authentication Actually Works

Authentication is a cornerstone of contemporary applications. Virtually every app demands user login, identity verification, and secure sessions. Though it's ubiquitous, many developers implement authentication without a complete understanding of it's inner workings. This article breaks down authentication step-by-step, explaining the core concepts used

Cybersecurity

Europol Just Warned 75,000 People They're Under Investigation for DDoS Attacks — Here's How the Whole Criminal Industry Works

On April 13, 2026, law enforcement from 21 countries seized 53 domains, arrested 4 people, and sent 75,000 warning emails to identified users of DDoS-for-hire platforms. They found 3 million criminal user accounts on seized servers. Operation PowerOFF has been running since 2018.

Cybersecurity

Claude Mythos Found 271 Zero-Days in Firefox 150. This Is What the New World Looks Like.

In February, Anthropic's Frontier Red Team used Claude Opus 4.6 to find 22 vulnerabilities in Firefox in two weeks — more than were reported in any single month in all of 2025. Then Mythos arrived. Firefox 150, released today, patches 271 vulnerabilities found by Claude.

Cybersecurity

Google and Cloudflare Set a 2029 PQC Deadline. The Rest of Big Tech Did Not.

Two papers dropped at the end of March. Both said the same thing in different ways: the quantum threat to elliptic curve cryptography is closer than we thought. How close? The kind of close that made Google set an internal deadline five years ahead of what the US government asked

Cybersecurity

One Employee. One OAuth Token. The Vercel Breach Explained

Vercel confirmed a security breach on April 18-19, 2026, tracing back to a compromised third-party AI tool and a single employee's Google Workspace connection. Here is the full attack chain, what was actually exposed, and what you need to do right now.