SharePoint CVE-2026-45659: Active RCE — Patch Now
CISA added SharePoint CVE-2026-45659 to its Known Exploited Vulnerabilities catalog after active exploitation was confirmed. Storm-2603 is deploying Warlock ransomware. Here are the ...
TARmageddon CVE-2025-62518: RCE in tokio-tar — Fix Now
CVE-2025-62518 (TARmageddon) is a CVSS 8.1 RCE in the abandoned tokio-tar Rust library. uv, testcontainers, ...
EU Council Revives Chat Control 1.0 After Parliament Killed It
The EU Council fast-tracked Chat Control 1.0 on July 2, exploiting summer recess timing to ...
AI Coding Agents Skip Package Verification — And Three Tools Just Dropped to Fix It
AI coding agents install packages without safety checks. Three tools shipped in 2026 to close ...
SimpleHelp CVE-2026-48558: MSP Supply Chain Under Attack
A CVSS 10.0 OIDC auth bypass in SimpleHelp RMM is actively exploited to deploy Djinn ...
AWS CLI v1 Enters Maintenance Mode July 15 — How to Migrate to v2 Now
AWS CLI v1 enters maintenance mode on July 15, 2026. No new service APIs after that date. Here are the three breaking changes ...
Adobe ColdFusion: 7 CVSS 10.0 Flaws — Patch Now
Adobe APSB26-68 patches 11 ColdFusion vulnerabilities, seven at CVSS 10.0. One is already being exploited. ...
Claude API Workload Identity Federation: Drop Keys Now
Anthropic's Workload Identity Federation is now GA. Replace your static Claude API key with short-lived ...
Google Rejected the YouTube Studio Prompt Injection Bug. Creators Are Still at Risk.
YouTube's Ask Studio had a stored prompt injection flaw that exposed private video titles. Google ...
Qualcomm Buys Modular for $3.9B: What Developers Need to Know
Qualcomm's $3.9B acquisition of Modular gives it Mojo and MAX, the best CUDA alternative on ...