PyTorch Lightning Malware: 8.3M Downloads Hit by Shai-Hulud Attack
On April 30, 2026, versions 2.6.2 and 2.6.3 of PyTorch Lightning—one of the most popular AI training libraries on PyPI with millions of ...
GitHub RCE CVE-2026-3854: 88% of Servers Still Vulnerable
Wiz disclosed critical GitHub RCE vulnerability CVE-2026-3854 on April 28. GitHub.com patched in 6 hours, ...
OAuth Bypass: Vercel Breach Exposes Platform Secret Risk
Vercel's April 2026 breach shows how OAuth tokens bypass MFA and platform environment variables create ...
Project Glasswing: AI Finds Bugs But <1% Get Fixed
Anthropic's Project Glasswing revealed Claude Mythos Preview found thousands of zero-days, but <1% were patched. ...
Mercor AI Breach: 40,000 Voice Samples Stolen—Lawsuits
Mercor's March 2026 breach exposed 40,000 voice recordings via LiteLLM supply chain attack. Biometric data ...
SBOMs Fail as Supply Chain Attacks Surge 73%
In March 2026, Axios—one of npm’s most-used HTTP clients with 100 million weekly downloads and running in 80% of cloud environments—became a malware ...
Fast16 Malware Predates Stuxnet by 5 Years: Cyber Warfare History Rewritten
Everyone thought Stuxnet was the first cyberweapon aimed at physical infrastructure. They were wrong by ...
LMDeploy SSRF Exploited in 12 Hours: Patch Now
CVE-2026-33626, a Server-Side Request Forgery (SSRF) vulnerability in LMDeploy’s vision-language model inference engine, was exploited ...
Bitcoin Quantum Freeze Debate: Immutability vs Survival
A proposal to freeze 5.6 million Bitcoin—worth up to $440 billion—has split the cryptocurrency community ...
AI Code Quality Crisis: 1.7x More Bugs in 2026
AI coding tools are everywhere. Ninety-three percent of developers use them, and half of all ...