Cybersecurity•Jul 8, 10:38 PM
Supabase Security Flaw: SECURITY DEFINER Inherits EXECUTE TO PUBLIC
A shared vulnerability in Supabase's database security model allowed unauthorized data access across multiple incidents.
Share:
Newsletter
THE DAILY RIFT
Five shifts. Five minutes. No noise.
- •Verified technology intelligence
- •Emerging patterns before the hype
- •Direct action steps for builders & founders
No spam. Unsubscribe anytime. Powered by Beehiiv.
Today's Intelligence
CybersecurityAug 28
NIS2 Directive Shifts Cybersecurity Liability to Companies
The EU's NIS2 Directive moves beyond mere compliance, imposing direct liability on entities for security failures.
●Builder Action:Developers must now implement security controls that were previously optional or handled by separate teams. Expect increased demands for secure coding practices, robust incident response mechanisms, and thorough supply chain security assessments within your development lifecycle. APIs and services you integrate will be scrutinized for their security posture, requiring deeper due diligence.
CybersecurityAug 28
AI Accelerates Vulnerability Discovery, Straining Defender Capabilities
AI's rapid discovery of software flaws outpaces traditional security workflows, demanding new strategies for correlation and remediation.
●Builder Action:Developers must anticipate AI-generated vulnerability reports that can flood security teams. Focus on secure coding practices and consider how your CI/CD pipelines can integrate automated security testing and faster patch deployment. Be prepared for increased scrutiny of code by AI tools, both for finding flaws and potentially for generating exploit proofs.
CybersecurityAug 28
Autistici/Inventati .org Domain Offline Following US Terrorism Designation
The popular encrypted email provider's primary domain is inaccessible after being targeted by the U.S. Treasury.
●Builder Action:Developers who utilized Autistici/Inventati's hosting or email services will find their applications and platforms inaccessible. The sudden domain takedown necessitates immediate investigation into data recovery options and potential migration strategies to alternative, more resilient infrastructure. This event underscores the risks of relying on services subject to geopolitical sanctions.
Funding Radar
Seed and Venture CapitalEnterprise Ireland
EUR15.0MRolling
Start-up FundingEnterprise Ireland
EUR50kRolling
IRAP Youth Employment ProgramIRAP Canada
CAD60kRolling
Innovation Assistance Program (IAP)IRAP Canada
CAD500kRolling
GBP0Rolling
Tool Radar
Enter ProAn AI-native platform for building and scaling applications.
paidDiscovered
GitNexusAn open-source kernel for coding agents, enabling AI-driven software development.
freeDiscovered
IQ RoutingTrajectory-aware LLM routing to reduce agent costs.
paidDiscovered
GLM-5.3-FlashThe first natively multimodal model in the GLM-5 series, offering advanced capabilities.
paidDiscovered
TracciaTraccia is a vendor-neutral AI Agent Control Plane for managing AI agents.
paidDiscovered
Latest Feed
Cybersecurity•Jul 8, 10:37 PM
Chainlink Proof of Reserve Could Have Flagged TerraUSD's $18B Collapse
TerraUSD's spectacular implosion revealed a critical flaw: a lack of verifiable, independent collateral. Chainlink's Proof of Reserve could have provided an early warning.
Share:
Cybersecurity•Jul 8, 10:37 PM
Alibaba Bans Claude Code Over Alleged China-Detection Backdoor, Shifts to Qoder
Alibaba engineers are reportedly switching to Qoder after discovering what they claim is a hidden backdoor in Anthropic's Claude Code designed to detect Chinese origin.
Share:
Cybersecurity•Jul 8, 10:37 PM
Windows 11 Identifier Used to Track Hacker Linked to Scattered Spider
Microsoft shared unique device data with the FBI, leading to the arrest of a 19-year-old suspected of working with the notorious Scattered Spider group.
Share:
Cybersecurity•Jul 8, 10:37 PM
Drift Detector Fails on Unchanged, Overdue Secrets
A common cloud configuration drift detection model breaks when secrets don't rotate, highlighting a blind spot.
Share:
Cybersecurity•Jul 8, 10:37 PM
Enterprise AI Stumbles on PII: Companies Ban LLMs or Risk Compliance
Enterprises face a stark choice: ban LLM tools or risk non-compliance due to PII handling failures.
Share:
Cybersecurity•Jul 8, 10:37 PM
Rust Web Project Dokumentado Hits Roadblocks, Offers Lessons
A developer's journey building an AI documentation tool in Rust reveals performance wins but also significant ecosystem and tooling challenges.
Share:
Cybersecurity•Jul 8, 10:37 PM
Web Cryptography is Snake Oil, Claims Hacker News Discussion
A deep dive into the arguments that client-side cryptography in browsers is fundamentally flawed and insecure.
Share:
Cybersecurity•Jul 8, 10:37 PM
Local MCP's 'Privacy' Pitch Falters with 183 Tools, Zero Guardrails
An indie dev's LLM offering read/write access to iMessage, Teams, and OneDrive claims local privacy, but security pros see a nightmare.
Share:
Cybersecurity•Jul 8, 10:37 PM
Sauna CTF Walkthrough: Active Directory Exploitation on Hack The Box
A detailed guide to tackling the Sauna CTF on Hack The Box, focusing on Active Directory enumeration and exploitation techniques.
Share: