https://hackyjs.com/posts/auditing-the-mcp-python-sdk-and-authlib-for-oauth-credential-leaks-and-missing-signature-checks Hacky JS en 2026-09-30T00:00:00.000Z Auditing the MCP Python SDK and Authlib for OAuth Credential Leaks and Missing Signature Checks python, oauth, mcp, security, authlib https://hackyjs.com/posts/cve-2026-86950-auditing-the-coregraphics-image-and-font-decoding-path-after-an-in-the-wild-zero-day Hacky JS en 2026-09-30T00:00:00.000Z CVE-2026-86950: Auditing the CoreGraphics Image and Font Decoding Path After an In-the-Wild Zero-Day apple, zero-day, coregraphics, memory-safety, spyware https://hackyjs.com/posts/measuring-eu-latency-to-alibaba-clouds-new-europe-regions-against-aws-and-azure Hacky JS en 2026-09-30T00:00:00.000Z Measuring EU Latency to Alibaba Cloud's New Europe Regions Against AWS and Azure alibaba-cloud, aws, azure, latency, cloud-computing https://hackyjs.com/posts/metering-always-on-agents-in-nodejs-cost-per-task-across-gpt-61-sol-and-astra Hacky JS en 2026-09-30T00:00:00.000Z Metering Always-On Agents in Node.js: Cost per Task Across GPT-6.1 Sol and Astra nodejs, ai-agents, llm-cost-optimization, observability, openai https://hackyjs.com/posts/auditing-a-self-hosted-computer-use-agent-stack-for-element-blindness-and-checkout-abuse Hacky JS en 2026-09-29T00:00:00.000Z Auditing a Self-Hosted Computer-Use Agent Stack for Element-Blindness and Checkout Abuse computer-use-agents, self-hosted-ai, gui-grounding, open-weight-models, browser-automation https://hackyjs.com/posts/building-agent-governance-into-your-api-instead-of-bolting-it-on-policy-audit-and-cli-surfaces Hacky JS en 2026-09-29T00:00:00.000Z Building Agent Governance Into Your API Instead of Bolting It On: Policy, Audit, and CLI Surfaces ai-agents, api-design, governance, security, developer-tools https://hackyjs.com/posts/what-cloudflares-voidzero-report-says-about-oxc-rolldown-and-vite-build-times Hacky JS en 2026-09-29T00:00:00.000Z What Cloudflare's VoidZero Report Says About Oxc, Rolldown, and Vite Build Times cloudflare, voidzero, oxc, rolldown, vite https://hackyjs.com/posts/why-a-waf-alone-would-not-stop-the-peoplesoft-cve-2026-35273-web-shell-drop Hacky JS en 2026-09-29T00:00:00.000Z Why a WAF Alone Would Not Stop the PeopleSoft CVE-2026-35273 Web Shell Drop peoplesoft, web-shell, waf-bypass, shinyhunters, incident-response