Cloudflare has published Security Audit Skill, an open-source skill that turns AI coding agents into structured security auditors capable of examining repositories, identifying potential vulnerabilities, independently validating findings, and producing
How brakes works: an open-source tool by José Ramón Pérez Agüera that installs and audits 21 mechanical brakes in GitHub repositories, from required CI and held-out tests to mutation testing, cross-model review and Claude Code hooks.
How to find Debian and Ubuntu servers running an APT version vulnerable to CVE-2026-109518, roll out the fix with Ansible, verify unattended-upgrades and review HTTP sources, mirrors and proxies.
On FreeBSD, Brotli flaw CVE-2026-111497 is fixed with pkg audit -F, pkg shlib -R, pkg upgrade and service -R, because the 64 packages that use Brotli link one shared library.
A Veduis guide sets out a staged approach to secrets management: properly ignored .env files, Gitleaks and detect-secrets, CI/CD-scoped secrets, Vault, cloud secret managers and zero-downtime rotation.
Anthropic shows CVE-2026-98432 allows remote root code execution on Linux servers with MPTCP listeners. Why Go 1.24 matters, patch status by distro and temporary mitigations.
CVE-2026-98432 hits the Linux kernel’s TCP/IPv4 code from version 4.4 onwards. Commands to check whether your server is exposed and how to update Debian, Ubuntu and RHEL.
ThinkRail, Agent Reach, OpenBot, the Karpathy CLAUDE.md and Huashu Design reviewed for operations: worktree isolation, copied browser sessions and full-access agents.
The PHP2Shell fix reached servers at very different times depending on who packaged PHP, and some branches only got it through paid support. Lessons for sysadmins.
LordOS is a free Debian 13-based distribution from Argentina’s iPERFEX with its own display server and Wayland compositor, a per-app firewall and sandboxed apps. It is still in beta.
