Project Zero’s Pixel 10 Zero-Click Exploit Explained
Google Project Zero chained a Dolby audio flaw and a VPU kernel driver bug to root the Pixel 10 silently. Here's how it ...
Azure SDK for Rust Is Now Stable: What to Know
The Azure SDK for Rust hit 1.0 stable on May 14. Seven crates ship with ...
Pwn2Own Berlin 2026: AI Coding Tools Were Hacked
Pwn2Own Berlin 2026 exploited Claude Code, Cursor, OpenAI Codex, and LiteLLM. Here's what fell, what ...
MCP Has 1,800 Unauthenticated Servers in Production. Here’s Your Exposure.
MCP's explosive growth has a security gap: 1,800 public servers with no auth, 200,000 exposed ...
Honeycomb Agent Observability: Debug AI Agents in Production
Honeycomb launched Agent Timeline, Canvas Agent, and Canvas Skills on May 12. Here's what changed ...
Kubernetes v1.36 Haru: What Changed and What to Do Now
Kubernetes v1.36 Haru retired Ingress NGINX, graduated DRA for GPU workloads, and finally enabled HPA scale-to-zero. Here is what changed and your migration ...
Pipelock: The AI Agent Firewall Developers Need in 2026
Pipelock is a free, open-source AI agent firewall that blocks SSRF, prompt injection, and credential ...
Gemma 4 MTP: How Google’s 3x Inference Boost Works
Google released Multi-Token Prediction drafters for Gemma 4 on May 5, delivering up to 3x ...
CVE-2026-23918: Apache HTTP/2 Double-Free RCE Explained
Apache 2.4.66 has a no-auth double-free in mod_http2 enabling DoS and RCE. CVE-2026-23918 affects Docker ...
iOS 26.5 RCS Encryption: How MLS Works and What Developers Need to Know
Apple and Google shipped cross-platform RCS end-to-end encryption in iOS 26.5. Here is the MLS ...