The challenge with AI in open source security has transitioned from an AI slop tsunami into more of a ... plain security report tsunami. Less slop but lots of reports. Many of them really good.
I'm spending hours per day on this now. It's intense.
| Website | https://matthiasott.com |
| Own Your Web Newsletter | https://matthiasott.com/newsletter |
| GitHub | https://github.com/matthiasott/ |
| CodePen | https://www.codepen.io/matthiasott |
The challenge with AI in open source security has transitioned from an AI slop tsunami into more of a ... plain security report tsunami. Less slop but lots of reports. Many of them really good.
I'm spending hours per day on this now. It's intense.
“LLMs can autonomously, and without fancy scaffolding, find and exploit 0-day vulnerabilities in critical software. This is not something that was true even, let’s say, three or four months ago.”

Nicholas Carlini, Research Scientist, Anthropic, speaks at [un]prompted 2026 on: Black-hat LLMs.Large language models are now capable of automating attacks t...
Just released a small but useful update for my little Internet Archive Plugin for Craft CMS. 🏛️
You can now opt individual entries out of automatic archiving via a lightswitch field – and manually send any entry to the Wayback Machine straight from the Craft CP entries index. ✨
New UNSW Sydney research finds vaping likely causes lung and oral cancer: Carcinogens in e-cigarette aerosols show DNA damage, tumours in mice & cellular harm. Please – tell your children, friends, and loved ones who might believe the “vaping is safe" lie of the tobacco industry. 💚
https://www.unsw.edu.au/newsroom/news/2026/03/vaping-likely-to-cause-cancer-new-findings
Holy shit you guys we just watched #Artemis go from the plane
(Edit: I posted videos in the replies, if that's of interest❤️)
✍️ New post: This, Still Not for Everyone
A few thoughts on the new WebAIM million report. And why we will only improve #accessibility on the Web together.
no
right?
no
wordpress can’t—
it couldn’t possibly—
no