Microsoft RAMPART & Clarity: Secure AI Agents Now
Microsoft open-sourced RAMPART and Clarity on May 20, 2026 — pytest-native tools that add security testing and design review to your AI agent ...
Azure Linux 4.0 Preview: Microsoft Splits Its Linux Strategy
Microsoft ships Azure Linux 4.0 preview (Fedora-based, for VMs) and Azure Container Linux GA (for ...
AI Slop Is Killing Bug Bounty Programs — Act Now
cURL ended its bug bounty. Nextcloud followed. Linus Torvalds says Linux security lists are unmanageable. ...
Railway GCP Outage: Why Multi-Cloud Failed for 8 Hours
Google Cloud's automated systems suspended Railway's account on May 19 — and took down AWS ...
Drupal CVE-2026-9082: Patch Now or Get Owned
Drupal's highly critical SA-CORE-2026-004 (CVE-2026-9082) is a no-auth SQL injection on PostgreSQL sites. Patch to ...
Nx Console VSCode Extension Hijacked: Act Now
The Nx Console VS Code extension was backdoored for 18 minutes on May 18. 6,000+ developers exposed. Here is what was stolen and ...
YellowKey & GreenPlasma: Two Windows Zero-Days With No Patch
A rogue researcher dropped two unpatched Windows zero-days — YellowKey bypasses BitLocker via USB; GreenPlasma ...
PraisonAI CVE-2026-44338: Auth Off by Default, Exploited Fast
CVE-2026-44338 left PraisonAI open to unauthenticated workflow execution. Attackers were scanning within 4 hours. Check ...
GitHub Breached via Malicious VS Code Extension (2026)
GitHub confirmed this week that a threat actor called TeamPCP exfiltrated approximately 3,800 internal repositories ...
NGINX Rift (CVE-2026-42945): Patch Now or Get Exploited
NGINX Rift is a critical heap buffer overflow actively exploited since May 16. Here is ...