OWASP AISVS 1.0: The AI Security Checklist Developers Need
OWASP AISVS 1.0 delivers 514 testable AI security requirements across 14 chapters. Here are the chapters that matter most for developers shipping AI ...
curl Takes July Off After AI Slop Killed Its Bug Bounty
curl's July vulnerability blackout stems from an AI slop crisis that killed its bug bounty ...
CVE-2026-45591: Patch ASP.NET Core SignalR DoS Now
CVE-2026-45591 lets unauthenticated attackers crash ASP.NET Core via SignalR MessagePack. Patch to .NET 8.0.28, 9.0.17, ...
Supabase June 2026: RLS Tester, pg-delta, Pricing Fix
Supabase's June 2026 update adds an RLS Tester, pg-delta schema diffing, and metered logs pricing. ...
LangGraph RCE: Patch Your AI Agent Checkpointers Now
Three now-patched CVEs in LangGraph chain SQL injection into remote code execution via unsafe msgpack ...
Spring AI Vector Store RCE: Patch Before June 30 EOL
CVE-2026-22738 gives unauthenticated attackers RCE on Spring AI apps via SpEL injection in SimpleVectorStore. Spring Boot 3.5 EOL hits June 30. Here are ...
Proto6: Six protobuf.js Vulnerabilities Expose Node.js to RCE
Cyera Research disclosed 6 CVEs in protobuf.js (Proto6) on June 10, 2026. Two achieve RCE ...
Terraform 1.15: Dynamic Module Sources Are Here
Terraform 1.15 ships dynamic module sources with the new const variable. Here's what changed, how ...
GitHub Bot PRs Now Trigger CI — With One Required Approval
GitHub now lets github-actions[bot]-created PRs trigger CI/CD workflows after maintainer approval. Here is what changed ...
Python Free-Threading Is Official: What PEP 779 Means for Your Code
Python 3.14.6 landed on June 10. Buried in the changelog is the announcement developers have ...