Age Verification Laws Are Live: What Developers Must Do Now
Google Play Age Signals API went live in Texas this month. Here's what age verification laws mean for your Android app, and why ...
Akrites: Linux Foundation Launches Open Source Security Coalition
The Linux Foundation launched Akrites on June 25 to coordinate open source vulnerability response as ...
GitHub Actions Checkout v7: Migrate Before July 16
GitHub's actions/checkout v7 blocks pwn request attacks by default. Your CI may break on July ...
Alibaba Distilled Claude: Anthropic’s 28.8M-Query Alert
Anthropic accuses Alibaba and Qwen of the largest AI distillation attack ever — 28.8 million ...
LastPass Data Breach 2026: Klue OAuth Attack Hits 8 Firms
LastPass customer data stolen via Klue OAuth supply chain breach on June 12. HackerOne, Recorded ...
AI Agent Security: The $98M Production Gap Developers Are Ignoring
Two AI agent security startups raised $98M in 72 hours. Arcade.dev and Convey raised 60M and 38M respectively. Here is why 88% of ...
Alibaba Ran 29M Fake Claude Queries to Steal AI Capabilities
Anthropic accuses Alibaba of running 28.8 million Claude API exchanges via 25,000 fake accounts to ...
Microsoft MDASH in Production: AI Agents Are Finding Real Windows CVEs
Microsoft’s MDASH agentic scanner is now live in production, finding critical Windows CVEs via 100+ ...
CVE-2026-20253: Patch Splunk Enterprise Now — Pre-Auth RCE
CVE-2026-20253 is a CVSS 9.8 pre-auth RCE in Splunk Enterprise 10.0 and 10.2. Active exploitation ...
Fake PostCSS npm Packages Drop a Windows RAT — Act Now
Three malicious npm packages impersonating PostCSS tools installed a Windows RAT on developer machines. Check ...