Mistral Large 4: The Open-Weight Model for Security Work
Mistral Large 4 scores 82% on vulnerability patching tests that closed models refuse. What the 1T-parameter open-weight MoE does well — and where ...
Anthropic OSS Scanner: Free AI Vulnerability Scans for Open Source
Anthropic opened enrollment for OSS Scanner on October 8 — a free, recurring vulnerability scanner ...
Rust Is Now Tier-1 at Microsoft — The MSVC Backend Explained
Microsoft’s Rust Tier-1 promotion includes a custom backend (rustc_codegen_utc) that wires Rust into MSVC’s UTC ...
OpenSSH 10.6: Compression Killed, PQ Keys Break Now
OpenSSH 10.6 disables LZ77 compression to close a side-channel attack, graduates post-quantum keys to stable, ...
curl 8.23.0 Ships October 14: 22 CVEs, One HIGH Severity
curl 8.23.0 releases October 14 with 22 CVEs, including HIGH severity CVE-2026-92392. Only the third ...
LMCache RCE: Unpatched CVSS 9.8 Hits vLLM Infra Now
LMCache has a CVSS 9.8 RCE with no patch. Google Cloud, CoreWeave, and NVIDIA Dynamo deployments are at risk. Here's who's exposed and ...
Pwn2Own 2026: AI Infrastructure Falls, LiteLLM Hit Twice
The AI tools your team runs in production just had their first turn on a ...
DataDirect AI Tool CVE-2026-91140: OpenAPI Files Execute OS Commands
Progress patched CVE-2026-91140 (CVSS 9.6) in DataDirect ARCGenAI-Generator. A crafted OpenAPI file executes OS commands ...
LibreOffice Calc RCE (CVE-2026-63277): Patch Now or Disable Java
LibreOffice Calc CVE-2026-63277 lets a crafted spreadsheet run remote Java code with no macro warning. ...
GitHub Copilot CLI Has a 28-Second Secret Thief — GitHub Won’t Fix It
Adversa AI exposed Cryptographic Context Injection in GitHub Copilot CLI: a 28-second attack that silently ...