RoguePlanet: Microsoft Defender Zero-Day — No Patch Yet
CVE-2026-50656 grants SYSTEM privileges on fully patched Windows 10 and 11. No patch, public PoC on GitHub. Here is what to do while ...
uv audit: Python Built-In Supply Chain Defense
Astral shipped uv audit and UV_MALWARE_CHECK on June 8. Here is how to add built-in ...
VMware Exodus: Tesco Sues Broadcom for £100M, Migrates
Tesco is migrating 40,000 VMware workloads while suing Broadcom for £100M. Broadcom's VMware licensing changes ...
GitHub Secret Scanning June 2026: Push Protection Gets Wider
GitHub expanded secret scanning push protection defaults on June 17, adding patterns for Supabase, Elastic, ...
CVE-2026-48907: Joomla JCE RCE Is Actively Exploited — Patch Now
CISA flagged CVE-2026-48907 in Joomla Content Editor as actively exploited. CVSS 10.0, no auth required. ...
15 JetBrains Plugins Stole AI API Keys — 70,000 Installs
Aikido Security found 15 malicious JetBrains Marketplace plugins that silently stole OpenAI and DeepSeek API keys from 70,000 developers. Here is the full ...
GitHub Agentic Workflows Is in Public Preview Now
GitHub Agentic Workflows hit public preview June 11. Write CI automation in Markdown, compile to ...
LiteLLM CVE Chain: A Default User Account Becomes Full Server Access
Three vulnerabilities chain from a default LiteLLM user to full RCE. CISA confirmed active exploitation ...
GrapheneOS Ported to Android 17: What Changes Now
GrapheneOS has been ported to Android 17 with official releases coming soon. Here's what the ...
144 Mastra npm Packages Backdoored: What to Check Right Now
144 @mastra npm packages were compromised today via a hijacked contributor account and typosquatted easy-day-js ...