Showing only posts by Tim Anderson. Show all posts.

Oct 16 2025 Microsoft kills 9.9-rated ASP.NET Core bug – 'our highest ever' score

Flaw in Kestrel web server allowed request smuggling, impact depends on hosting setup and application code Microsoft has patched an ASP.NET Core vulnerability with a CVSS score of 9.9, which security program manager Barry Dorrans said was "our highest ever." The flaw is in the Kestrel web …

Sep 18 2025 Cloudflare DDoSed itself with React useEffect hook blunder

Source

Dashboard loop caused API outage that was hard to troubleshoot Cloudflare has confessed to a coding error using a React useEffect hook, notorious for being problematic if not handled carefully, that caused an outage for the platform's dashboard and many of its APIs.... [...]

Sep 09 2025 Anthropic's Claude Code runs code to test if it is safe – which might be a big mistake

Source

AI security reviews add new risks, say researchers App security outfit Checkmarx says automated reviews in Anthropic's Claude Code can catch some bugs but miss others – and sometimes create new risks by executing code while testing it.... [...]

Jul 24 2025 Compromised Amazon Q extension told AI to delete everything – and it shipped

Source

Malicious actor reportedly sought to expose AWS 'security theater' The official Amazon Q extension for Visual Studio Code (VS Code) was compromised to include a prompt to wipe the user's home directory and delete all their AWS resources.... [...]

Jul 24 2025 Not pretty, not Windows-only: npm phishing attack laces popular packages with malware

Source

The "is" package was infected with cross-platform malware after a scam targeting maintainers The popular npm package "is" was infected with cross-platform malware, around the same time that linting utility packages used with the prettier code formatter were infected with Windows-only malware.... [...]