Mini Shai-Hulud Hits @antv npm: 16M Downloads Poisoned
TeamPCP’s Mini Shai-Hulud worm poisoned 637 npm packages across the @antv ecosystem on May 19. Here’s what to check, what to rotate, and ...
Flipper One Arrives: Pocket Linux Network Security Tool
Flipper One is official: RK3576, 8GB RAM, Wi-Fi 6E, 5G M.2, built-in AI accelerator in ...
Docker AI Governance: Secure AI Agents at Runtime
Docker AI Governance enforces runtime-level policy across network, filesystem, credentials, and MCP tools — so ...
Claude Mythos Found Zero-Days in Every OS — Act Now
Anthropic’s Claude Mythos Preview found thousands of zero-days across every major OS and browser. Here’s ...
Microsoft RAMPART & Clarity: Secure AI Agents Now
Microsoft open-sourced RAMPART and Clarity on May 20, 2026 — pytest-native tools that add security ...
Azure Linux 4.0 Preview: Microsoft Splits Its Linux Strategy
Microsoft ships Azure Linux 4.0 preview (Fedora-based, for VMs) and Azure Container Linux GA (for AKS). Here is the two-track split, migration steps, ...
AI Slop Is Killing Bug Bounty Programs — Act Now
cURL ended its bug bounty. Nextcloud followed. Linus Torvalds says Linux security lists are unmanageable. ...
Railway GCP Outage: Why Multi-Cloud Failed for 8 Hours
Google Cloud's automated systems suspended Railway's account on May 19 — and took down AWS ...
Drupal CVE-2026-9082: Patch Now or Get Owned
Drupal's highly critical SA-CORE-2026-004 (CVE-2026-9082) is a no-auth SQL injection on PostgreSQL sites. Patch to ...
Nx Console VSCode Extension Hijacked: Act Now
The Nx Console VS Code extension was backdoored for 18 minutes on May 18. 6,000+ ...