GitHub’s 10,000 Trojan Repos: The Orchid Campaign Targets AI Agents
A solo researcher exposed 10,000 GitHub repositories delivering StealC malware, undetected for over a year. Here is how the attack works and what ...
Steam Machine Is $1,049: What Game Developers Must Know
Valve just confirmed the Steam Machine at $1,049. Most developers need zero extra work — ...
10,000 Trojan GitHub Repos Are Targeting AI Agents — Audit Your Dependencies Now
Over 10,000 malicious GitHub repositories have been serving Trojan ZIPs for 18 months, now targeting ...
Grok 4.3 on Amazon Bedrock: What Breaks and What Works
Grok 4.3 is now on Amazon Bedrock via a new Mantle engine — but existing ...
Megalodon: 5,561 GitHub Repos Backdoored in Six Hours — Rotate Your CI Secrets Now
Megalodon backdoored 5,561 GitHub repos in 6 hours, stealing 449 GB of CI secrets including ...
AKS Container Escape CVE-2026-32193: Patch Your Nodes Now
CVE-2026-32193 is a CVSS 8.8 container escape in Azure Kubernetes Service. Here is how to audit hostNetwork pods, patch nodes, and apply mitigations ...
MCP Security Crisis: 40% of Servers Have No Auth
12,520 MCP servers are publicly exposed. 40% have zero authentication. VIPER-MCP found 106 zero-days. Here ...
OpenAI Codex Bug Writes 640 TB/Year to Your SSD
OpenAI Codex has a bug that writes up to 640 TB/year to your local SSD ...
15 Malicious JetBrains Plugins Stole AI API Keys — Revoke Yours Now
Fifteen JetBrains Marketplace plugins with 70,000 installs secretly stole AI API keys for 8 months. ...
NGINX 1.31.2: Patch the HTTP/3 QUIC Use-After-Free Now
F5 patched three critical NGINX vulnerabilities on June 17. CVE-2026-42530 (CVSS 9.2) hits HTTP/3 QUIC ...