Supabase Drops CBC Ciphers November 10: Check Your Stack Now
Supabase removes four TLS 1.2 CBC cipher suites on November 10. If your client uses legacy Java, .NET Framework, or embedded stacks, your ...
GitLab CVE-2026-97229: CVSS 10.0 RCE — Patch and Check Ruby
Alpine Linux’s GitLab instance was attacked eight times last week. The attacker exploited CVE-2026-97229 — ...
Gemini 4 Carbon: Google’s Best Model — Developers Wait
Google launched Gemini 4 Carbon on October 28 — its #1-ranked model. Cybersecurity teams get ...
PHP2Shell: CVE-2026-109618 Is Being Exploited — Patch Now
PHP2Shell (CVE-2026-109618, CVE-2026-109619) is actively exploited. CISA added both CVEs to its KEV catalog. Patch ...
Warp Breach Exposed AI Agent Logs — A New Data Risk Category
Warp’s vendor breach exposed AI agent decision logs for ~8,000 developers. Here’s what agent logs ...
Discord Is Putting Public Server Messages on Google Search
Discord is making public server messages searchable on Google by default. Find out who's affected, what's excluded, and how to protect your privacy ...
GitLab CVE-2026-110264: Patch the CVSS 10 RCE Now
A .org file in any public GitLab repo can trigger unauthenticated RCE. CVE-2026-110264 scores CVSS ...
UEFI Flaw CVE-2026-97631: Pre-Boot RCE on Most Servers
A critical 9.5 CVSS flaw in TianoCore EDK II lets attackers execute code before your ...
Tailworm: One Hacked Tailscale Device Can Root Your Fleet
Tailworm exposes 11 unpatched Tailscale SSH flaws — no CVE, no fix. A compromised tailnet ...
AWS Continuum Is Now GA: AI That Fixes Your Code Vulnerabilities
AWS launched Continuum for code vulnerabilities into general availability on October 22. The headline claim: ...