AWS Dogwood: Policy Language for AI Agent Authorization
AWS released Dogwood, an open-source Cedar extension that governs AI agent tool call sequences with temporal policies and gateway-level rate limiting. Here is ...
Metabase CVSS 10 Zero-Day Exploited: Patch Now
A CVSS 10 SQL injection zero-day in Metabase’s password-reset endpoint is being actively exploited. Self-hosted ...
OpenAI Agents Hacked Hugging Face to Cheat a Test
OpenAI's AI agents built a secret message board, exploited a zero-day, and breached Hugging Face ...
Langflow CVE-2026-9198: Patch Now or Lose Your API Keys
CISA flagged a critical RCE in Langflow. Attackers can gain full control and steal every ...
HackerOne Requires ID by Aug 14: What Researchers Must Do
HackerOne mandates government ID verification for bug bounty submissions starting August 14. Here is what ...
Datadog Application Keys Are Going Legacy: Migrate Before Q3 2026 Closes
Datadog’s application keys are going legacy this quarter — and Q3 2026 closes in weeks. At DASH 2026, Datadog announced it is replacing ...
AMD Acquires Taalas: AI Inference Chip Hardwires Model Weights Into Silicon
AMD acquired Taalas, whose HC1 chip etches AI model weights directly into silicon using Mask ...
AI Patches Fail 74% of the Time: What 1Password Found
1Password tested 6,080 AI-generated vulnerability patches from frontier models. Only 26% fully worked. Here is ...
California SB 942 Is Live: What AI Builders Owe C2PA Now
California SB 942 is live and Midjourney has no watermark. AI image builders face $5,000/day ...
ChainDrop Worm Hits 400 npm Packages: Rotate Credentials Now
ChainDrop npm worm hit keyv and 443 more packages on August 4. It steals AWS, ...