TS-2026-009: Tailscale SSH Root Bypass, Patch Now
Tailscale SSH TS-2026-009 lets any SSH user get root by logging in as '-i', bypassing ACL rules. Upgrade to 1.98.9 now — here's ...
Microsoft Patch Tuesday July 2026: 570 Flaws, 3 Zero-Days
Microsoft patched a record 570 vulnerabilities in July 2026, including 2 exploited zero-days. Here is ...
OAuth Client ID Spoofing: Entra ID Credentials Validated Without Logs
Two active threat groups are validating stolen Microsoft Entra ID credentials via OAuth client ID ...
Microsoft RAMPART and Clarity: Test AI Agents in CI
Microsoft open-sourced RAMPART and Clarity to help developers test AI agents for prompt injection and ...
Google Cloud Run Sandboxes: Run Untrusted AI Code Safely
Google’s Cloud Run sandboxes are in public preview. One deployment flag gives your AI agents ...
Cursor IDE RCE: Unpatched git.exe Flaw Goes Public
Security researchers at Mindgard published a full disclosure today of an unpatched Cursor IDE RCE vulnerability — after seven months of near-silence from ...
New York Freezes AI Data Centers: What Developers Need to Know
New York signed the nation's first statewide data center moratorium. The 50MW rule, GEIS timeline, ...
SK Hynix Nasdaq Debut: HBM Memory Crisis Hits Developers
SK Hynix raised $26.5B on Nasdaq July 10. Its CEO warned 2027 will be the ...
CodeQL 2.26: GitHub Scans AI Code for Prompt Injection
CodeQL 2.26.0 adds js/system-prompt-injection to detect untrusted input in AI SDK system prompts for OpenAI, ...
AWS MCP Server Goes GA: OAuth 2.1 Ends Credential Sprawl
AWS MCP Server hit GA on July 9 with OAuth 2.1 browser-based auth for Claude ...