CVE-2026-85046: Patch Chrome and Electron Before Sept 18
Google's sixth Chrome zero-day of 2026 is actively exploited. CISA deadline is September 18. Electron developers must rebuild — a browser update won't ...
AI Alignment Warnings: What OpenAI and DeepMind Insiders Said
Two frontier AI researchers broke ranks on September 15, 2026. Their warnings about hidden misalignment ...
JumpCloud Agentic IAM Adds MCP Discovery: Govern AI Agents Now
JumpCloud's Agentic IAM now auto-discovers hidden MCP servers and governs AI agent identities. Here's what ...
CVE-2026-33186: gRPC-Go Auth Bypass — Patch to 1.79.3 Now
CVE-2026-33186 (CVSS 9.1 Critical) lets attackers bypass gRPC-Go authorization by omitting the leading slash from ...
Docker CopyEscape CVE-2026-17106: Patch docker cp Now
CopyEscape (CVE-2026-17106) lets malicious containers overwrite host files via docker cp. Patch to Docker Engine ...
curl 8.22.0: HTTP Message Signatures Land as Experimental
curl 8.22.0 ships experimental RFC 9421 HTTP Message Signatures. Four new flags let you sign requests with ed25519 or HMAC-SHA256. Here is what ...
GitHub Actions cache-mode: Lock Down Your CI Cache
GitHub Actions cache-mode went GA September 10. One YAML field closes the pull_request_target cache poisoning ...
GitHub Actions Self-Hosted Runners: Fix Before September 25
GitHub Actions brownouts are live today. Self-hosted runners not updated by September 25 stop receiving ...
Helm CVE-2026-35205: Patch Plugin Verification Now
Helm 4.0.0-4.1.3 contains a plugin verification bypass (CVE-2026-35205, CVSS 8.4) and path traversal (CVE-2026-35204, CVSS ...
GitHub Copilot Enterprise Agent Permissions: Lock Down Shell Access Now
GitHub Copilot Business and Enterprise admins can now enforce agent permissions — block shell commands, ...