Vietnam Bans Rooted Phones From Banking – Why This Fails
Vietnam's rooted phone banking ban takes effect March 2026. Why this security theater will fail while punishing developers who root for privacy and ...
IBM Bob AI Agent Tricked into Running Malware via Prompt Injection
IBM’s AI Coding Agent Tricked into Running Malware IBM’s AI coding agent “Bob” can be ...
Tailscale Disables TPM Encryption: Security-by-Default Fails
Tailscale disabled TPM state file encryption by default Jan 7, 2026 after firmware updates broke ...
NPM Staged Publishing: $50M Attack Forces Security Shift
npm announced staged publishing in January 2026, requiring review periods before packages go live. The ...
VS Code Fork Vulnerability: 500 Devs Hit by Supply Chain Attack
The Hidden Vulnerability Your AI-powered coding assistant may have just recommended malware. Security researchers at ...
IBM API Connect 9.8 CVSS Auth Bypass Hits 1,000+ Firms
A critical authentication bypass vulnerability in IBM API Connect allows remote attackers to gain unauthorized access without credentials. CVE-2025-13915 scores 9.8 on CVSS—one ...
38 State Tech Laws Hit Jan 1, 2026: AI Transparency Clash
On January 1, 2026, developers woke up to a new reality: 38 state tech laws ...
React2Shell: 90K+ Next.js Apps Hit by 10.0 CVSS RCE
Within hours of its December 3, 2025 disclosure, China state-sponsored hackers were already exploiting it. ...
API Security 2026: 99% Hit, 400% Surge, $186B Cost
Ninety-nine percent of organizations suffered at least one API security incident in 2025. API attacks ...
California DROP: Delete Data From 500+ Brokers Now
California just automated privacy rights enforcement at scale. The state launched DROP (Delete Request and ...