Claude Platform WIF Is GA: Ditch the Static API Key Now
Last year, GitGuardian found 1.27 million AI-service credentials exposed on public GitHub — up 81% from the year before. The root cause is ...
AutoJack: One Web Page Can RCE the Host Running Your AI Agent
Microsoft disclosed AutoJack on June 18: a 3-bug chain that lets a malicious web page ...
Atomic Arch Hijacks 1,500 AUR Packages: Rotate Credentials
Attackers hijacked 1,500 AUR packages via orphan adoption, deploying credential stealers and eBPF rootkits. Here's ...
CVE-2026-25253: OpenClaw 1-Click RCE — Patch Now
OpenClaw CVE-2026-25253 lets attackers steal auth tokens and achieve full RCE in one click. Over ...
AI Is Hunting Bugs Now: 2026 CVE Count Heading for 66,000
FIRST revised its 2026 CVE forecast to 66,000 — up 46% — as AI tools ...
Gemini API Blocks Unrestricted Keys Today: Migrate in 3 Steps
Google's Gemini API rejects unrestricted keys starting June 19. Here's why 2,863 keys were exposed, what changed today, and how to migrate in ...
Google Workspace Blocks Firefox: Chrome Now Required
Google Workspace's Context-Aware Access is blocking Firefox users. The enforcement mechanism, Endpoint Verification, only exists ...
Chrome 150 Kills uBlock Origin: Manifest V3 Is Final
Chrome 150 lands June 30 and permanently disables uBlock Origin for 40M users. What Manifest ...
CVE-2026-42530 & CVE-2026-42055: Patch NGINX Now
F5 issued out-of-band patches for two CVSS 9.2 NGINX flaws. CVE-2026-42530 hits HTTP/3, CVE-2026-42055 hits ...
CVE-2026-2473: Google Vertex AI SDK Let Attackers Run Your Code
A flaw in Google's Vertex AI Python SDK let attackers hijack ML model uploads via ...