10,000 Malicious GitHub Repos Are Pushing Trojans Now
A researcher found 10,000 GitHub repos distributing trojans via cloned README links. SmartLoader installs StealC. Here's what developers need to check.
VS Code 1.125: Remote Browser Fix and What Else Changed
VS Code 1.125 fixes the remote browser proxy for SSH workflows, adds a 2-hour extension ...
Apigee Gets MCP Support: Token Rate Limiting for AI Agents
MCP servers are multiplying fast, and most of them are one misconfigured endpoint away from ...
GitHub Actions 2026 Security Roadmap: Lock Your CI/CD Now
GitHub's 2026 Actions security roadmap introduces dependency locking, a native egress firewall, and scoped secrets ...
Node.js 26.3.1, 24.17.0, 22.23.0: Four CVEs to Patch Now
Node.js shipped security patches for all active release lines today. Two HIGH-severity CVEs — TLS ...
AMD Removed RAM Encryption From Ryzen — Without Telling You
AMD silently disabled TSME on consumer Ryzen CPUs via AGESA firmware. Cold boot attacks now work. Intel still ships TME on all chips. ...
CVE-2026-10520: Ivanti Sentry CVSS 10.0 — Patch Now
Ivanti Sentry has a CVSS 10.0 unauthenticated RCE flaw actively exploited within 40 hours. CISA ...
NewCore’s $66M Bet on AI Agent Identity Security
88% of enterprises had AI agent security incidents last year. NewCore just raised $66M to ...
Florida Sues OpenAI: The AI Liability Era Has Arrived
Florida filed the first state lawsuit against OpenAI on June 1. Then 42 AGs subpoenaed ...
RoguePlanet: Microsoft Defender Zero-Day — No Patch Yet
CVE-2026-50656 grants SYSTEM privileges on fully patched Windows 10 and 11. No patch, public PoC ...