PraisonAI: Nine CVEs Including Two CVSS 10.0 RCEs — Patch Now
RAXE Labs disclosed nine PraisonAI vulnerabilities on July 11, including two CVSS 10.0 RCEs and a 9.9 file-write flaw. Patch praisonai and praisonaiagents ...
GuardFall: Shell Injection Hits 10 of 11 AI Coding Agents
On June 30, Adversa AI researcher Omer Ben Simon published GuardFall — a class of ...
OpenAI Patch the Planet: AI Fixes Open-Source Security
OpenAI’s Patch the Planet uses GPT-5.5-Cyber and Trail of Bits engineers to find and fix ...
jscrambler npm Backdoored: Rotate Your Credentials Now
The jscrambler npm package was backdoored five times on July 11, 2026. Five malicious versions ...
Hono 4.12.27 Patches Three CVEs: Upgrade Now
Hono 4.12.27 patches three CVEs: XSS via cx() in hono/css, async context leakage in hono/jsx, ...
Cloud Run Sandboxes Hit Preview: AI Code, No Extra Cost
Google shipped Cloud Run sandboxes into public preview at WeAreDevelopers World Congress. Isolated AI code execution inside existing Cloud Run instances, at no ...
OpenSSH 10.4: Eight Security Fixes and Post-Quantum SSH
OpenSSH 10.4 patches CVE-2026-60002 (CVSS 9.4 CRITICAL) and seven more flaws. Includes the first experimental ...
Kerberos RC4 Dies July 14: Audit Your Service Accounts Now
Microsoft's July 14 Patch Tuesday removes the RC4 rollback option for Kerberos. Audit service accounts ...
CoreWeave’s $35B Debt Loop and Your GPU Cloud Risk
Nvidia funds the neoclouds buying its GPUs, then collects revenue back. CoreWeave burned $4.71B FCF ...
Claude Code Auto Mode Is Now Default on Bedrock, Vertex, and Foundry
Claude Code v2.1.207 enables auto mode by default on AWS Bedrock, Vertex AI, and Azure ...