BitLocker Zero-Day YellowKey Breaks Windows Encryption
YellowKey defeats BitLocker on Windows 11 and Server 2022/2025 using WinRE. The default enterprise config is vulnerable. No patch yet — here's what ...
node-ipc npm Credential Stealer Hits 822K Downloads
Three node-ipc npm versions carry a stealer targeting 90+ secret categories. Here's how the attacker ...
Vercel Deepsec: AI Agents Scan Your Code for Flaws
Vercel open-sourced deepsec, an AI security scanner using Claude Opus 4.7 and GPT-5.5 to find ...
PostgreSQL 19 Beta: Graph Queries, Atomic Upserts, End of pg_repack
PostgreSQL 19 enters beta with SQL/PGQ native graph queries, ON CONFLICT DO SELECT, and REPACK ...
Cloudflare Workflows V2: Dynamic Execution Explained (2026)
Cloudflare shipped Workflows V2 and Dynamic Workflows on May 1 — an 11x jump in ...
Cerebras IPO: WSE-3 API Delivers 2,700 Tokens/Sec for Developers
Cerebras went public at $5.55B. The real story: a 2,700 tok/sec inference API that’s OpenAI-compatible, free to start, and coming to AWS Bedrock ...
Project Zero’s Pixel 10 Zero-Click Exploit Explained
Google Project Zero chained a Dolby audio flaw and a VPU kernel driver bug to ...
Azure SDK for Rust Is Now Stable: What to Know
The Azure SDK for Rust hit 1.0 stable on May 14. Seven crates ship with ...
Pwn2Own Berlin 2026: AI Coding Tools Were Hacked
Pwn2Own Berlin 2026 exploited Claude Code, Cursor, OpenAI Codex, and LiteLLM. Here's what fell, what ...
MCP Has 1,800 Unauthenticated Servers in Production. Here’s Your Exposure.
MCP's explosive growth has a security gap: 1,800 public servers with no auth, 200,000 exposed ...