Pillow CVE-2026-112900: Two Critical RCEs — Patch Now
Pillow 13.0.0 patches two CVSS 9.2 RCE vulnerabilities. CVE-2026-112900 turns a filename into a shell command. CVE-2026-112398 exploits FPX heap overflow. Upgrade or ...
Claude Security Now Scans Continuously: What Changed
Anthropic’s Claude Security update adds continuous scanning, fix tracking, and threat modeling to its enterprise ...
PHP2Shell: Critical PHP RCE — Patch Now
PHP issued emergency patches for CVE-2026-109618 and CVE-2026-109619, two CVSS 9.2 RCEs affecting every PHP ...
Cloudflare Security Audit Skill: Open-Source, 41K Stars
Cloudflare open-sourced the AI security audit tool it uses internally. Here is how adversarial verification ...
Google Agent Compute Engine: One microVM Per AI Agent
Google's Agent Compute Engine gives every AI agent a hardware-isolated microVM with credentials kept outside ...
Sweden Bans ChatGPT and Claude: Copilot Wins by Default
Sweden just banned ChatGPT and Claude for civil servants. Only Copilot cleared security review. Here's why it's a vendor decision, not a security ...
Ubuntu 26.10: Rust Coreutils Done, Local AI, Post-Quantum APT
Ubuntu 26.10 ships with 100% Rust coreutils, Myna local AI dictation, Sequoia PGP post-quantum signing, ...
Solo.io Releases Agentshield and Agentdesktop at AGNTCon
Solo.io dropped three open source AI agent governance tools at AGNTCon 2026: Agentshield, Agentdesktop, and ...
Zeabur Is Shutting Down: Two Breaches, 3.2M Secrets Leaked
Zeabur is shutting down after its second security breach in two months exposed 3.2M environment ...
Quad9 Leaves France: DNS Resolvers Won’t Lie for Courts
Quad9 cuts French DNS service on November 24 after a court orders piracy blocking. The ...