npm 12 Is Live: Install Scripts Off and 2FA Tokens Expiring
npm v12 shipped July 8 disabling install scripts by default. CI exits green while native builds silently fail. Plus: 2FA-bypass tokens lose permissions ...
CloudNativePG 1.30: DatabaseRole CRD and Two CVE Patches
CloudNativePG 1.30 ships a new DatabaseRole CRD for GitOps role management, Lease-based failover, and patches ...
Akrites Is Live: The Linux Foundation Unifies OSS Security
The Linux Foundation launched Akrites on June 25th — a shared SIRT and coordinated vulnerability ...
RoguePlanet CVE-2026-50656 Patched: Verify Your Defender Engine
Microsoft patched RoguePlanet (CVE-2026-50656) on July 9. Check your Defender engine version now — WSUS-managed ...
EU Chat Control 1.0 Passed: The Majority Vote That Lost
EU Chat Control 1.0 passed on July 9 despite 314 MEPs voting against it. Learn ...
AI Coding Agents Trigger EDR: Claude Code, Cursor, Codex
Sophos found Claude Code, Cursor, and Codex trigger the same endpoint rules that catch ransomware. Here is what developers and security teams must ...
Kimi K2.7 Is Now in GitHub Copilot: What Developers Need to Know
Moonshot AI’s Kimi K2.7 Code is the first open-weight model in GitHub Copilot’s model picker. ...
OpenAI Patch the Planet: AI Is Fixing Your Open-Source Stack
OpenAI's Patch the Planet uses Codex Security to fix curl, Python, Go, and 30+ open-source ...
Januscape CVE-2026-53359: Patch This Linux KVM Escape Now
CVE-2026-53359 Januscape lets guest VMs escape to the Linux KVM host on Intel and AMD. ...
Chinese AI Models Hit 46% of US API Tokens: What Developers Must Do Now
Chinese AI models now hold up to 46% of US enterprise API tokens. Both governments ...