Python 3.14 T-Strings: Fix SQL Injection and XSS With One Change
Python 3.14 introduced t-strings via PEP 750. Learn how they prevent SQL injection and XSS by separating interpolated values from your query and ...
Chatto: Open-Source Slack Alternative With Per-User Encryption
Chatto went open source July 8 — single binary, SSO included free, per-user crypto-shredding on ...
Refuse: Block Vulnerable Package Installs Before Your AI Agent Ships Them
Refuse is a pre-install package manager shim that blocks vulnerable installs across npm, pip, cargo, ...
1Password for Claude: AI Agents Log In Safely
1Password for Claude lets AI agents complete logins without ever seeing your passwords. Here is ...
Ledger Agent Stack: AI Proposes, Hardware Enforces
Ledger launched Agent Stack on July 15 — open-source tools that let AI agents prepare ...
VulnHunter: Capital One’s Open-Source AI Security Tool
Capital One open-sourced VulnHunter — an agentic AI scanner that reasons like an attacker and kills false positives before they reach your team. ...
Debian 13.6: Secure Boot Fix and 244 Patches to Apply Now
Debian 13.6 ships 244 fixes including a critical Secure Boot CA update, 13 curl CVEs, ...
Microsoft July 2026 Patch Tuesday: 570 CVEs, 3 Zero-Days
Microsoft’s record July 2026 Patch Tuesday fixes 570 vulnerabilities and 3 zero-days. SharePoint and AD ...
MCP 2026-07-28 Spec Ships July 28: Six Breaking Changes to Fix Now
The MCP 2026-07-28 specification finalizes July 28. Sessions are gone, the initialize handshake is removed, ...
ViteVenom: 7 Fake npm Packages Use Blockchain to Deliver RATs
Seven malicious npm packages impersonating @vitejs/* deliver a RAT via blockchain C2 — infrastructure that ...