GeoServer Zero-Day: No Patch, Active Exploits, Act Now
An unpatched SQL injection zero-day in GeoServer is being actively probed. No CVE, no patch. Here is what developers and ops teams need ...
DRAM Scrambling Attack Unlocks AMD CPU Security — No Patch
Christopher Domas's DRAM scrambling attack bypasses SEV, SGX, TDX, and TrustZone by remapping memory controller ...
GLM-5.3: Open-Weight Coding SOTA and Emergent Cyber Risk
Z.ai GLM-5.3 launches today with a 6x coding jump on Terminal-Bench and exploitation chain reasoning ...
Patch Now: VS Code CVE-2026-70336 RCE This Week
VS Code has an active RCE and Copilot has an OS command injection flaw this ...
AI Coding Agents Are Prompt Injection Targets — Patch Now
Cursor, AWS Kiro, and GitHub Agentic Workflows were all hit by prompt injection this summer. ...
Zoomsday: AI Built a Zoom Zero-Click Exploit in Under 24 Hours — Patch Now
Zoom patched CVE-2026-53413 after AI weaponized it in under 24 hours with 20 prompts. Here's what changed, what to update, and what this ...
LiteLLM Breach: 153GB of Stolen Credentials Are Now Public
The LiteLLM supply chain attack just became much worse. A 153GB credential dump from 2,488 ...
Cloudflare OS Is Open Source: What Developers Get
Cloudflare open-sourced its AI agent workspace on August 5, 2026. Here is how the Gatekeepers ...
CVE-2026-62815: Patch Your HTTP/3 Server Before It’s Exploited
Microsoft QUIC has a CVSS 9.8 unauthenticated RCE. Windows Server 2022/2025 with HTTP/3 enabled are ...
A2A Protocol Hit 150 Orgs in Production — Are You Implementing It Right?
The Agent2Agent protocol crossed a milestone in April 2026 that is easy to miss: 150 ...