GrapheneOS Duress PIN Prosecution: First US Federal Case
Federal prosecutors charged a man for wiping his GrapheneOS phone at the US border — a first. Here's what the case means for ...
Patch Tuesday July 2026: 622 CVEs, 2 Zero-Days, Patch Now
Microsoft's record 622-CVE July 2026 Patch Tuesday includes two actively exploited zero-days in SharePoint and ...
PolinRider: 108 Open Source Packages Poisoned — Act Now
North Korean hackers poisoned 108 npm, Go, and Packagist packages using forged Git history. Here ...
otelc v1: Add OTel Traces to Go Apps Without Code Changes
OpenTelemetry Go compile-time instrumentation v1 (otelc) is now stable. Add distributed traces to any Go ...
Docker Desktop 4.83: Model Runner Inspector and Two CVE Fixes
Docker Desktop 4.83.0 shipped on July 20, and the update that matters for developers building ...
GitHub Bug Bounty Cuts: AI Report Spam Forces Two-Tier Program
GitHub halved public bug bounty payouts today and created an invite-only VIP tier after AI-generated reports flooded its security team. Here is what ...
AI Kill Switch Act: What the $20M Fine Means for Devs
The AI Kill Switch Act gives DHS authority to shut down frontier AI systems. Here ...
Node.js July 2026 Security Patch: Patch All Three Lines Now
Node.js ships a HIGH severity security patch across 22.x, 24.x, and 26.x on July 27. ...
Cloudflare AI Crawler Controls: Three Switches, One Deadline
Cloudflare replaced its AI bot toggle with three switches—Search, Agent, Training. September 15 changes defaults. ...
Next.js July 2026 Security Patch: Fix SSRF, Middleware Bypass, and DoS Now
Next.js patched 9 CVEs on July 21 — 4 rated HIGH. A Turbopack middleware bypass ...