JADEPUFFER: First AI Ransomware That Fixed Its Own Bugs
JADEPUFFER is the first autonomous AI ransomware. It exploited a LangFlow RCE, self-corrected in 31 seconds, and encrypted production databases. Here's what developers ...
Codex Browser Developer Mode: Full CDP Access Is Now Live
OpenAI just gave Codex full access to Chrome’s DevTools Protocol — the same low-level interface ...
Kerberos RC4 Deprecation: Final Phase Hits July 14 — Act Now
Microsoft’s Kerberos RC4 deprecation reaches final enforcement on July 14. No rollback. Here’s what breaks, ...
GitHub Secret Scanning Public Monitoring: Enable It Now
GitHub launched public monitoring for enterprise secret scanning on July 1, scanning all of github.com ...
Adobe Now Patches Twice Monthly: Adjust Before July 14
Adobe moves to twice-monthly security bulletins on July 14. AI is compressing exploit windows from ...
AI’s CVSS Moment: Anthropic’s CJS Jailbreak Severity Framework
Anthropic published the Cyber Jailbreak Severity (CJS) framework on July 2, creating the first cross-industry scoring scale for AI jailbreaks with a CVSS-like ...
GitHub Copilot CLI in Actions: Drop the PAT Now
GitHub Copilot CLI now authenticates in Actions using GITHUB_TOKEN instead of a personal access token. ...
Claude Code Hid Tracking Markers in Your Prompts
Claude Code secretly embedded invisible steganographic tracking markers in system prompts from April to July ...
SharePoint CVE-2026-45659: Active RCE — Patch Now
CISA added SharePoint CVE-2026-45659 to its Known Exploited Vulnerabilities catalog after active exploitation was confirmed. ...
TARmageddon CVE-2025-62518: RCE in tokio-tar — Fix Now
CVE-2025-62518 (TARmageddon) is a CVSS 8.1 RCE in the abandoned tokio-tar Rust library. uv, testcontainers, ...