EU Council Revives Chat Control 1.0 After Parliament Killed It
The EU Council fast-tracked Chat Control 1.0 on July 2, exploiting summer recess timing to bypass Parliament's 311-228 rejection. Here's what developers building ...
AI Coding Agents Skip Package Verification — And Three Tools Just Dropped to Fix It
AI coding agents install packages without safety checks. Three tools shipped in 2026 to close ...
SimpleHelp CVE-2026-48558: MSP Supply Chain Under Attack
A CVSS 10.0 OIDC auth bypass in SimpleHelp RMM is actively exploited to deploy Djinn ...
Adobe ColdFusion: 7 CVSS 10.0 Flaws — Patch Now
Adobe APSB26-68 patches 11 ColdFusion vulnerabilities, seven at CVSS 10.0. One is already being exploited. ...
Claude API Workload Identity Federation: Drop Keys Now
Anthropic's Workload Identity Federation is now GA. Replace your static Claude API key with short-lived ...
Google Rejected the YouTube Studio Prompt Injection Bug. Creators Are Still at Risk.
YouTube's Ask Studio had a stored prompt injection flaw that exposed private video titles. Google rejected the bug. Here's the attack and what ...
Bad Epoll CVE-2026-46242: Patch Your Linux Kernel Now
CVE-2026-46242 Bad Epoll lets any local Linux user become root with 99% reliability. No workaround ...
Slopsquatting: Your AI Coding Agent Is Now a Supply Chain Risk
AI coding agents hallucinate package names — and attackers register them. Here is how slopsquatting ...
JetBrains Critical Vulnerabilities: Patch Hub and IntelliJ
JetBrains patched a CVSS 9.8 Hub flaw enabling unauthenticated account takeover. Self-hosted Hub, IntelliJ IDEA, ...
Project Glasswing: AI Found 10,000 Vulns. Patching Is the Hard Part.
Anthropic's Project Glasswing used Claude Mythos to find 10,000+ critical vulnerabilities in open source software. ...