This Sunday at @BSidesSF, Tailscale’s @patrickod.com will share how he found a long-standing CSRF bug in the gorilla/csrf Go lib.

Don’t miss it 🔍
🎤 pretalx.com/bsidessf2025...
📅 bsidessf2025.sched.com/event/1x8UA
📺 bsidessf.org/streams

#BSidesSF #AppSec #golang #Tailscale #SecurityResearch

We’ve recently learned that malicious actors are setting up fake domains to impersonate Tailscale—through scam websites, emails, and even bogus job listings.

If you want to know how to spot the signs, we’ve put together a short guide to help you stay safe:

This April 1st, we're serious: Tailscale supports Plan 9 from Bell Labs!
Secure peer-to-peer networking on the OS that inspired it all ➡️ tailscale.com/blog/tailsca...

Sufficient time has passed and I'm excited to share a demo and details of a 9 year old CSRF vulnerability that I discovered in the popular gorilla/csrf library. attack.csrf.patrickod.com

The latest episode of WIRED’s beloved Tech Support series answers all of your questions about dictators — in case for some reason that was of interest right now.

www.youtube.com/watch?v=vK6f...

What keeps security leaders up at night? I interviewed 57 CISOs and security leaders to find out. The answers were surprisingly consistent: access management challenges, vulnerability management complexity, and limited SaaS visibility. Read the post: mayakaczorowski.com/blogs/what-s...

The Go team plans to issue a security fix for the golang.org/x/crypto/ssh package in the golang.org/x/crypto module on Wednesday, December 11th.

groups.google.com/g/golang-ann...