OpenVPN 2.7.7: Seven CVEs Fixed — Upgrade Now
OpenVPN 2.7.7 fixes seven CVEs including a NULL DACL flaw, openvpnserv path traversal, and a cross-platform reliability layer bug. No workaround — upgrade ...
OpenAI Agents Secretly Used a German Wiki for 2 Months
For two months this summer, a 25-year-old German coding wiki that had sat mostly dormant ...
AI Coding Agents Leaked CI Secrets via GitHub Issue — Patch Now
Claude Code, Gemini CLI, and Codex all leaked CI runner secrets through a single unprivileged ...
GitHub Actions September 2026: Three Security Fixes Worth Applying Today
GitHub Actions shipped three CI security changes on September 3: a runner deprecation REST API, ...
CrowdStrike SafeMind: What Developers Must Know
CrowdStrike and NVIDIA launched SafeMind at Fal.Con 2026: the first agentic cybersecurity AI pairing Red ...
JetStream Clearance Stops Rogue AI Agents Before They Act
JetStream Security shipped Clearance on September 2 — a reasoning engine that sits between your agent and every tool it can call, evaluates ...
JDK 27 Ships Sept 15: Post-Quantum TLS and What to Do
JDK 27 releases September 15 with post-quantum TLS on by default, G1 as the universal ...
OpenBao v2.6: Open Vault Fork Gets Workflow Engine
OpenBao v2.6 ships per-namespace sealing and a native workflow engine — two features HashiCorp Vault's ...
Gemini 3.8 Flash Cyber: Restricted Access and What Devs Must Know
Google's Gemini 3.8 Flash Cyber hits near-frontier security benchmarks but is locked to ~650 orgs ...
Anthropic Enterprise Frontier Safeguards: What Claude API Developers Must Know
Anthropic’s EFS moves Fable 5 monitoring data to your cloud — but it’s not zero ...