Zoomsday: Zoom Zero-Click RCE Hits All Meeting Participants — Patch Now
Zoomsday (CVE-2026-53413) lets any Zoom meeting participant silently execute code on every other attendee's machine. No clicks, no prompts. Patches are out — ...
PostgreSQL 19 Beta 3 Is Out: Patch Now, PG14 EOL in 89 Days
PostgreSQL 19 Beta 3 landed August 13 with 28 security CVEs fixed and PG14 end ...
Ghostjacking: Your AI Coding Agent Is the Attack Surface
Tenet Security's Ghostjacking attack hijacks Claude Code and Cursor through Cloudflare logs, Datadog alerts, and ...
Homomorphic Encryption for AI: Google HEIR Ships Today
Google released HEIR this week — a compiler that runs AI on encrypted data. Here ...
DynamoDB Vector Search Goes GA: What AWS Devs Must Know
AWS launched DynamoDB native vector search on August 5 — no preview, straight to GA. ...
CVE-2026-9198: Langflow RCE Is Being Exploited — Patch Now
CVE-2026-9198 gives unauthenticated attackers full RCE on Langflow via a two-step chain. CISA KEV August 4. Upgrade to 1.10.1 and rotate credentials now.
Triton 3.7 Plugin Extensions: Drop the Meta Fork
Triton 3.7 ships Plugin Extensions and TLX as a pip package. Get persistent GEMM kernels ...
GPT-5.6-Cyber and Daybreak Red: What Security Teams Must Know
OpenAI launched GPT-5.6-Cyber on August 10 with a 95% ACCR and real Chrome CVEs to ...
ChainDrop npm Worm: Fix Your Lockfile Before You Rotate Credentials
ChainDrop hit 444 npm packages and 2B monthly downloads. Here is the correct fix order ...
77 Evil Twin Extensions Hit Open VSX — Act Now
77 fake extensions harvested developer and CI data from Open VSX. If you use VS ...