Homomorphic Encryption for AI: Google HEIR Ships Today
Google released HEIR this week — a compiler that runs AI on encrypted data. Here is the honest overhead story and when homomorphic ...
CVE-2026-9198: Langflow RCE Is Being Exploited — Patch Now
CVE-2026-9198 gives unauthenticated attackers full RCE on Langflow via a two-step chain. CISA KEV August ...
GPT-5.6-Cyber and Daybreak Red: What Security Teams Must Know
OpenAI launched GPT-5.6-Cyber on August 10 with a 95% ACCR and real Chrome CVEs to ...
ChainDrop npm Worm: Fix Your Lockfile Before You Rotate Credentials
ChainDrop hit 444 npm packages and 2B monthly downloads. Here is the correct fix order ...
77 Evil Twin Extensions Hit Open VSX — Act Now
77 fake extensions harvested developer and CI data from Open VSX. If you use VS ...
CVE-2026-62878: Patch the Wormable Windows DNS RCE Now
CVE-2026-62878 is a CVSS 9.8 wormable RCE in Windows DNS Server. No auth needed. ZDI confirmed it self-propagates. Here is what to patch ...
CVE-2026-68820: Lazarus Ran This Zero-Day for 5 Weeks
Lazarus Group exploited CVE-2026-68820, a Windows afd.sys zero-day, for 5 weeks before August Patch Tuesday. ...
Your Server’s BMC Is Exposed: 86,000 Devices, 54% Critical
At Black Hat 2026, runZero found 86,000 exposed BMCs with 54% carrying critical flaws. Here's ...
Claude Now Watermarks Its Text – What Developers Must Know
Anthropic Claude now embeds invisible watermarks in all output. Here is how it works, what ...
GeoServer Zero-Day: No Patch, Active Exploits, Act Now
An unpatched SQL injection zero-day in GeoServer is being actively probed. No CVE, no patch. ...