CVE-2026-0257: GlobalProtect VPN Auth Bypass Is Being Exploited Now
CVE-2026-0257 is under active exploitation. CISA added it to the KEV catalog. If you run GlobalProtect with authentication override cookies, check your config ...
node-redis 6.0: RESP3 Default and What to Do Now
node-redis 6.0 makes RESP3 the default protocol, bumps the Node.js minimum to 20, and adds ...
Supabase Multigres: Postgres Gets Horizontal Scaling
Supabase raised $500M at $10.5B and launched Multigres — an open-source, Vitess-based horizontal scaling layer ...
CVE-2026-41089: Windows Netlogon Zero-Click RCE Is Being Exploited Now
CVE-2026-41089 is a CVSS 9.8 zero-click RCE in Windows Netlogon, actively exploited since May 13. ...
CVE-2026-48501: GitHub CLI Leaks Auth Token — Patch to 2.93.0 Now
GitHub CLI CVE-2026-48501 sends your auth token to non-GitHub servers during gh attestation and gh ...
Cloudflare Dynamic Workers: Sandbox AI Agents 100x Faster
Cloudflare Dynamic Workers uses V8 isolates to sandbox AI-generated code in under 5ms — 100x faster than containers. Code Mode cuts token costs ...
CVE-2025-48595: Android Zero-Day Exploited — Act Now
Google's June 2026 Android patch fixes CVE-2025-48595, an actively exploited Framework zero-day. CISA deadline: June ...
Apple’s Pkl: Stop Writing Kubernetes YAML by Hand
Apple's Pkl configuration language adds type safety, classes, and constraints to Kubernetes config. Learn how ...
CVE-2026-44338: PraisonAI Auth Bypass Exploited in 4 Hours
PraisonAI CVE-2026-44338 ships authentication disabled by default. Versions 2.5.6-4.6.33 are vulnerable. Here is what attackers ...
Google Catches First AI-Built Zero-Day: Act Now
Google's Threat Intelligence Group caught the first confirmed AI-generated zero-day exploit in the wild — ...