99.9% of AI Vulnerabilities Are Fixable. No One Is Fixing Them.
Orca Security scanned 1,200+ production environments and found 99.9% of fixable AI vulnerabilities remain unpatched. Here is what the data shows and what ...
Langflow CVE-2026-33017: CISA’s First AI Agent in KEV
Langflow CVE-2026-33017 gives attackers unauthenticated RCE. CISA added it to KEV on July 7 — ...
Friendly Fire: AI Code Reviewers Hijacked to Run Malware
The tool you deployed to catch malicious code just ran it instead. On July 8, ...
Refuse: Block Vulnerable Package Installs Before Your AI Agent Does
Refuse is an open-source shim that intercepts npm, pip, cargo, and 15 more package managers ...
GhostApproval: AI Coding Agents’ Approval Dialogs Lie
GhostApproval: Malicious repos write to SSH keys via AI coding agents while dialogs show harmless ...
Microsoft Patch Tuesday July 2026: 127 CVEs, Act Now
Microsoft drops 127 patches July 14 including a wormable CVSS 9.8 RCE. Kerberos RC4 dies permanently. Here is your developer action checklist.
Apple Loses EU DMA Gatekeeper Appeal: What iOS Developers Must Know Now
Europe's General Court dismissed Apple's two-year DMA gatekeeper challenge on July 9. The App Store ...
Windows 11 July 2026 Update: Point-in-time Restore, Kerberos Fix, and What Developers Need to Do
The Windows 11 KB5095093 update lands July 14 with Point-in-time Restore GA and permanent Kerberos ...
Kubernetes v1.37: containerd 2.0, cgroup v2, and What to Fix Before August 26
Kubernetes v1.37 ships August 26. Three breaking changes will fail your upgrade silently. Here is ...
PraisonAI: Nine CVEs Including Two CVSS 10.0 RCEs — Patch Now
RAXE Labs disclosed nine PraisonAI vulnerabilities on July 11, including two CVSS 10.0 RCEs and ...