Top all-time · #18980
Kudelski Security Research Blog
Company blog · kudelskisecurity.com/researchsecurity
Kudelski Security Research Blog is the company blog at kudelskisecurity.com, writing about security. Since 2025, 4 different Hacker News readers have linked it 4 times, most often “CodeRabbit: From a Simple PR to RCE and Write Access on 1M Repositories (2025)”. It is still writing: the last post was on 2026-10-30, and you can follow it by feed.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
Linked by one HN commenter in a thread on an open-source code review tool. The linked post describes how Kudelski Security exploited a code review tool, CodeRabbit, and the commenter cites it as a reason for dropping that tool.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
We provide innovative cybersecurity solutions that prevent threats before they impact your business. Partner with us to ensure continuous protection.
Most-linked posts?
- CodeRabbit: From a Simple PR to RCE and Write Access on 1M Repositories (2025)2 people · 2 mentions · first linked 2026-03-09
What Hacker News says?
Nothing against coderabbit or SaaS specifically, but this was one of the reasons I stopped using it https://kudelskisecurity.com/research/how-we-exploited-coder... It's very easy to build a basic code review tool. It's hard to build one that developers won't ask you to turn off because of false positives (or one that will miss your next escaped bug) I think if all the tool does is run a claude code level /review ski…
Comment linking /research/how-we-exploited-coderabbit-from-a-simple-pr-to-rce-and-write-access-on-1m-repositories
on “Alibaba/Open-Code-Review”Submitted CodeRabbit: From a Simple PR to RCE and Write Access on 1M Repositories (2025) as a story · 3 points
HN discussionSubmitted How We Exploited Qodo: From a PR Comment to RCE and AWS Admin Key – Leaked Twice as a story · 1 points
HN discussionSubmitted Adding quantum resistance to WireGuard (2021) as a story · 1 points
HN discussion