GhostApproval: AI Coding Agents’ Approval Dialogs Lie
GhostApproval: Malicious repos write to SSH keys via AI coding agents while dialogs show harmless filenames. Cursor and Amazon Q patched.
Microsoft Patch Tuesday July 2026: 127 CVEs, Act Now
Microsoft drops 127 patches July 14 including a wormable CVSS 9.8 RCE. Kerberos RC4 dies ...
Apple Loses EU DMA Gatekeeper Appeal: What iOS Developers Must Know Now
Europe's General Court dismissed Apple's two-year DMA gatekeeper challenge on July 9. The App Store ...
Windows 11 July 2026 Update: Point-in-time Restore, Kerberos Fix, and What Developers Need to Do
The Windows 11 KB5095093 update lands July 14 with Point-in-time Restore GA and permanent Kerberos ...
Kubernetes v1.37: containerd 2.0, cgroup v2, and What to Fix Before August 26
Kubernetes v1.37 ships August 26. Three breaking changes will fail your upgrade silently. Here is ...
PraisonAI: Nine CVEs Including Two CVSS 10.0 RCEs — Patch Now
RAXE Labs disclosed nine PraisonAI vulnerabilities on July 11, including two CVSS 10.0 RCEs and a 9.9 file-write flaw. Patch praisonai and praisonaiagents ...
GuardFall: Shell Injection Hits 10 of 11 AI Coding Agents
On June 30, Adversa AI researcher Omer Ben Simon published GuardFall — a class of ...
OpenAI Patch the Planet: AI Fixes Open-Source Security
OpenAI’s Patch the Planet uses GPT-5.5-Cyber and Trail of Bits engineers to find and fix ...
jscrambler npm Backdoored: Rotate Your Credentials Now
The jscrambler npm package was backdoored five times on July 11, 2026. Five malicious versions ...
Hono 4.12.27 Patches Three CVEs: Upgrade Now
Hono 4.12.27 patches three CVEs: XSS via cx() in hono/css, async context leakage in hono/jsx, ...