OpenAI Secure MCP Tunnel: Private MCP Servers, No Firewall Changes
OpenAI shipped Secure MCP Tunnel on May 27, 2026. Connect private MCP servers to ChatGPT, Codex, and the Responses API through outbound-only HTTPS. ...
GlassWorm Botnet Taken Down: Audit Your Developer Environment Now
CrowdStrike and Google took down the GlassWorm botnet on May 26. Your machine may still ...
Kyverno 1.18: SSRF Patches, CEL Push, ClusterPolicy Out
Kyverno 1.18 patches two SSRF CVEs, adds CEL gzip library, and advances the ClusterPolicy deprecation. ...
npm Staged Publishing: The 2FA Gate the TanStack Attack Made Necessary
npm 11.15.0 ships staged publishing with a mandatory 2FA approval gate — the defense designed ...
TrapDoor: The Supply Chain Attack That Hijacks Your AI
TrapDoor planted 34 malicious packages across npm, PyPI, and Crates.io — then used zero-width Unicode ...
GitHub Bans Researcher Over Windows Zero-Days and Unpaid Bug Bounty
GitHub banned security researcher Nightmare-Eclipse after they released 6 unpatched Windows zero-days. Three are actively exploited. The bug bounty dispute behind it.
Project Lightwell: IBM and Red Hat Bet $5B on Open Source Security
IBM and Red Hat launched Project Lightwell today — a $5B initiative using AI and ...
Claude Code Security Plugin: Catch Bugs Before Production
Anthropic's free security-guidance plugin for Claude Code catches vulnerabilities in real time across three layers. ...
Jaeger v2 Traces AI Agents: OTel GenAI Conventions Guide
Jaeger v2 now supports OTel GenAI semantic conventions for AI agent tracing. Learn how to ...
AMD Vivado Drops Free Linux Support: FPGA Devs Take Action
AMD shipped Vivado 2026.1 on May 25 and buried the headline in its release notes: ...