Ideas for building
better software.

Juice Shop v20.0.0 — a fresh squeeze of features, now with AI

Juice Shop v20.0.0 — a fresh squeeze of features, now with AI After months of work on the develop branch, OWASP Juice Shop v20.0.0 is ready to serve. This is a major version bump packed with new challenges, a redesigned storefront, and a long list of under-the-hood improvements. Read on to learn what’s new in this release. ⚠️ Heads up before you use it: This release contains breaking changes for existing challenges and CTF setups, plus technical changes that may require updates to your customiza

[GUEST DIARY] Tearing apart website fraud to see how it works., (Wed, May 13th)

&#;x26;#;x5b;This is a Guest Diary by Joshua Nikolson, an ISC Intern and part of the SANS.edu Bachelor&#;x26;#;39;s degree in Applied Cybersecurity (BACS) program.]

ISC Stormcast For Wednesday, May 13th, 2026 https://isc.sans.edu/podcastdetail/9930, (Wed, May 13th)

Agents, Workers - Agents SDK v0.12.4: chat recovery, routing retries, durable Think submissions, and Voice connection control

The latest release of the Agents SDK ↗ brings more reliable chat recovery, fixes Agent state synchronization during reconnects, adds durable submissions for Think, exposes routing retry configuration, and adds connection control for Voice agents. Chat recovery improvements @cloudflare/ai-chat now keeps server turns running when a browser or client stream is interrupted. This is useful for long-running AI responses where users refresh the page, close a tab, or temporarily lose connection. Calli

Agents, Workers - Agents SDK v0.12.4: chat recovery, routing retries, durable Think submissions, and Voice connection control

The latest release of the Agents SDK brings more reliable chat recovery, fixes Agent state synchronization during reconnects, adds durable submissions for Think, exposes routing retry configuration, and adds connection control for Voice agents. Chat recovery improvements @cloudflare/ai-chat now keeps server turns running when a browser or client stream is interrupted. This is useful for long-running AI responses where users refresh the page, close a tab, or temporarily lose connection. Calling s

Logs - New Logpush datasets and updated fields across multiple Logpush datasets in Cloudflare Logs

Cloudflare has updated Logpush datasets: New datasets Email Security Post-Delivery Events: A new dataset with fields including AlertID, CompletedAt, Destination, FinalDisposition, Folder, From, FromName, MessageID, MessageTimestamp, MicrosoftTenantID, Operation, PostfixID, Reasons, Recipient, RequestedAt, RequestedBy, RequestedDisposition, Status, Subject, Success, and To. Magic Network Monitoring Flow Logs: A new dataset with fields including AWSVPCFlowJSON, Bits, DestinationAS, DestinationAddr

Cloudflare Web Analytics - /cdn-cgi/rum endpoint now returns 405 for non-POST requests

The /cdn-cgi/rum beacon endpoint now returns 405 Method Not Allowed for non-POST requests instead of 404 Not Found. The response includes an Allow: POST, OPTIONS header per RFC 9110 §15.5.6. Previously, sending a GET or other non-POST request to this endpoint returned a 404, which was misleading because it suggested the endpoint did not exist. The new 405 response clearly indicates that the endpoint exists but only accepts POST requests. The Web Analytics beacon (beacon.min.js) already uses POST

The Elasticsearch Agent Builder Hackathon

The Elasticsearch Agent Builder Hackathon showed AI agents built with Elastic tools to solve real-world problems. Winners include PHAROS (drug safety in <60s), Gauntlet (adversarial testing), and a duplicate detection agent for Kenya’s HIV program.