Huntress
Understanding Business Email Compromise (BEC): How It Works | Huntress
A business email compromise (BEC) attack is a type of scam where bad actors impersonate a trusted source to obtain information from their targeted individual.
Wednesday, 25 June 2025
Everything this site carried that day, newest first. Stories are kept for a month, and the widely covered ones for a year.
Databricks / ClickHouse / DuckDB / Supabase / Neon / PlanetScale
Why Postgres needs better connection security defaults
In this post: why are Postgres connections with sslmode=require insecure? How does Neon ensure secure connections? And what needs to happen to make secure Postgres connections the norm? It’s common to see sslmode=require on the end of a Postgres connection string. Maybe your own...
Vercel (blog + changelog)
Introducing BotID, invisible bot filtering for critical routes
Modern sophisticated bots don’t look like bots. They execute JavaScript, solve CAPTCHAs, and navigate interfaces like real users. Tools like Playwright and Puppeteer can script human-like behavior from page load to form submission. Traditional defenses like checking headers or rate limits aren't…
Vercel (blog + changelog)
Vercel Queues is now in Limited Beta
Vercel Queues is a message queue service built for Vercel applications, in Limited Beta. Vercel Queues lets you offload work by sending tasks to a queue, where they’ll be processed in the background. This means users don’t have to wait for slow operations to finish during a request, and your app…
Vercel (blog + changelog)
Introducing Active CPU pricing for Fluid compute
Fluid compute exists for a new class of workloads. I/O bound backends like AI inference, agents, MCP servers, and anything that needs to scale instantly, but often remains idle between operations. These workloads do not follow traditional, quick request-response patterns. They’re long-running…
Framework blogs: Next.js releases / Svelte / Angular / Django / Rails / Laravel / Spring / React Native / Flutter
Nightwatch Found 78K Exceptions in 2.7B Events on Forge
How we tested Laravel monitoring using Nightwatch on Forge to surface real-world insights from 2.76 billion events.
Huntress
Recutting the Kerberos Diamond Ticket
Clear up common misconceptions about the Kerberos Diamond Ticket and learn how to refine the technique for better OPSEC, including more realistic PAC details and support for service tickets. You’ll learn how to apply the idea securely to both Ticket Granting Tickets and Service Tickets, creating…
Databricks / ClickHouse / DuckDB / Supabase / Neon / PlanetScale
Join me if you can: ClickHouse vs. Databricks vs. Snowflake - Part 2
We took the same JOIN-heavy benchmark from Part 1 and made ClickHouse even faster. By replacing JOINs with in-memory dictionaries, we saw up to 6.6× faster queries and over 60% cost savings, with no data reloading or schema rewrites required.