Christophe Tafani-Dereeper

The Codex version is better. The tail pointer is the defining difference — it shows a stronger understanding of linked list design. O(1) append is the whole reason you'd use a linked list over an array in many scenarios, and the Claude version gets that wrong. The Codex version is also cleaner structurally (shared nodeAt helper, no redundant initializations).

I asked Claude (Opus 4.6) and Codex (GPT-5.3) to each generate a simple LinkedList implementation in Java.

Then I asked Claude to pick the better one. No hesitation: "The Codex version is better" 🤔

gist.github.com/christophetd...

If you're using VSCode or Cursor, this is a pretty solid extension to have in your toolbox!

Decoding the GitHub recommendations for npm maintainers | Datadog Security Labs This blog post explores the rationale and implementation behind GitHub's security recommendations for npm maintainers following numerous high-profile supply-chain incidents. It details how hardening p...

Decoding the GitHub recommendations for npm maintainers

securitylabs.datadoghq.com/articles/dec...

by @phrawzty.com

Investigating an adversary-in-the-middle phishing campaign targeting Microsoft 365 and Okta users

securitylabs.datadoghq.com/articles/inv...

CVE-2025-55182 (React2Shell): Remote code execution in React Server Components and Next.js

securitylabs.datadoghq.com/articles/cve...

Building an npm worm Building an npm virus via self-replicating lifecycle scripts.

"Building an npm worm" (2016)

contolini.com/building-an-...

A few days ago, a new piece of malware started spreading in npm, compromising and backdooring hundreds of legitimate npm packages and GitHub users. Read the analysis from our security research team:

securitylabs.datadoghq.com/articles/sha...

If you're in cloud security, do have a look at this piece of research I've been working on! Feedback / thoughts welcome

ChatControl wants to scan all your private messages The EU is pushing legislation that would scan all our private messages, even in encrypted apps.

The EU is advancing legislation requiring all messaging platforms to scan private messages, even in encrypted apps like Signal/WhatsApp/Telegram.

600+ security researchers oppose ChatControl for being technically flawed.

Learn more about it 👉 metalhearf.fr/posts/chatco...

#ChatControl #privacy

Thanks! This was an incredibly great post

If you're into cloud security, fwd:cloudsec Europe is now live.

Schedule: fwdcloudsec.org/conference/e...

I did a bit more looking into the upcoming bitnami deprecation. The images are still getting millions of pulls a week, so depending on exactly what tags vanish next week, there could be a lot of broken deploys on the 28th!

raesene.github.io/blog/2025/08...

@micahflee.com thank you for the amazing and inspiring defcon talk

I arbitrarily picked a list of 50 talks I'm most excited about that are happening next week at DEF CON / Black Hat / BSides LV / The Diana Initiative.

I'll also add recordings/slides to this list when they become available!

Getting ready for DEF CON next week!

✅ Slides
✅ Demos
✅ Custom shirt designed for the occasion

MalwareBazaar - c68e42f416f482d43653f36cd14384270b54b68d6496a8e34ce887687de5b441 Threat intel on c68e42f416f482d43653f36cd14384270b54b68d6496a8e34ce887687de5b441 (MD5 ed375deea6f7407d2ff9dab1cb326473)

This is dropping ed375deea6f7407d2ff9dab1cb326473 (bazaar.abuse.ch/sample/c68e4...)

credits Varun Sharma for the share on LinkedIn

Looks like the maintainer of a number of highly-popular npm packages was phished through npnjs[.]com, and his access used to publish malicious versions of their packages

x.com/JounQin/stat...

www.linkedin.com/feed/update/...

github.com/prettier/esl...

Great research, would you be able to share the sample GitHub repositories and/or their metadata? I'm working on an open-source tool and could use some additional samples!

Stratus Red Team AWS attack techniques are now mapped to the Threat Technique Catalog for AWS

Stratus Red Team AWS attack techniques: stratus-red-team.cloud/attack-techn...

Threat Technique Catalog by AWS: aws-samples.github.io/threat-techn...

Security Best Practices - Model Context Protocol

The MCP spec has been updated to include security best practices

• Confused deputy
• Token passthrough
• Session hijacking

modelcontextprotocol.io/specificatio...

Solid way to start the week

Anatidaephobia Anatidaephobia is the irrational fear of being watched/stalked by one or more duck(s). It is not a recognized or documented phobia in the field of psychology or psychiatry. The term "anatidaephobia" w...

phobia.fandom.com/wiki/Anatida...

👀

Happy to discuss submission ideas!

If you're a cloud practitioner based in Europe, definitely submit to fwd:cloudsec Berlin happening in September!

We're actively seeking submissions from first time speakers and non-security folks. In that case, you can submit by May 30th and get initial feedback on your submission!

fwd:cloudsec Europe 2025 | fwd:cloudsec fwd:cloudsec is a non-profit conference on cloud security. At this conference you can expect discussions about all the major cloud platforms, both attack and defense research, limitations of security...

Ticket sales for fwd:cloudsec Europe 2025 goes live on April 22nd, first batch at 9 AM CET and a second batch at 7PM CET. Tickets are sold through Swoogo, link at fwdcloudsec.org/conference/e... ..

My story breaking this news exclusively was 7K+ words and had almost all of this in it, and more:
www.npr.org/2025/04/15/n...

Malicious Maven packages, SSRFs strike again, and stealing cloud credentials from web applications | Datadog Security Labs This month’s digest has a little bit of everything—cloud threats, supply chain attacks, and a reminder that yes, attackers are still exploiting SSRFs.

The March edition of the Datadog Security Digest is out!

securitylabs.datadoghq.com/newsletters/...

• New MITRE ATT&CK coverage matrix in Stratus Red Team
• Compromised GitHub actions
• Malicious Maven packages
• Exploitation of SSRF vulnerabilities on the rise
• ... and more

Looking forward to it! ☁️🇪🇺🇩🇪

By making minor changes to command-line arguments, it is possible to bypass EDR/AV detections.

My research, comprising ~70 Windows executables, found that all of them were vulnerable to this, to varying degrees.

Here’s what I found and why it matters 👉 wietze.github.io/blog/bypassi...