Mastery vs. Management

/The Bee's Knees 🐝

The headline picks from this issue. The full issue has more.

1. /01

   Invariant has discovered a critical vulnerability affecting the widely-used GitHub MCP integration (14k stars on GitHub). The vulnerability allows an attacker to hijack a user's agent via a malicious GitHub Issue, and coerce it into leaking data from private repositories.

   Read : pick 1
2. /02

   The Era Of The Business Idiot

   Too many business leaders are detached from the real work, chasing vibes and shareholder value instead of building good products or treating people well. They latch onto fads like AI without understanding them, proving they prioritize looking busy over actually getting things done right.

   Read : The Era Of The Business Idiot
3. /03

   Grafana Full read SSRF and Account Takeover: CVE-2025-4123

   A seemingly simple redirect bug in Grafana was chained with other flaws, creating a path for attackers to read internal files or even fully take over user accounts.

   Read : Grafana Full read SSRF and Account Takeover: CVE-2025-4123
4. /04

   Shopify's approach to careers is refreshingly simple: let people who are good at making things keep making things. They've rejected the corporate ladder nonsense where your only path forward is management. Instead, they've built a "mastery system" where craftspeople can advance by getting better at their craft.

   Watch : pick 4
5. /05

   Top bug bounty hunter Rhynorater shares 11 critical web, desktop, and IoT hacks

   Learn how clever bypasses netted him up to $400k in bounties.

   Watch : Top bug bounty hunter Rhynorater shares 11 critical web, desktop, and IoT hacks