uv audit: Python Built-In Supply Chain Defense
Astral shipped uv audit and UV_MALWARE_CHECK on June 8. Here is how to add built-in CVE scanning and malware blocking to your Python ...
GitHub Secret Scanning June 2026: Push Protection Gets Wider
GitHub expanded secret scanning push protection defaults on June 17, adding patterns for Supabase, Elastic, ...
CVE-2026-48907: Joomla JCE RCE Is Actively Exploited — Patch Now
CISA flagged CVE-2026-48907 in Joomla Content Editor as actively exploited. CVSS 10.0, no auth required. ...
15 JetBrains Plugins Stole AI API Keys — 70,000 Installs
Aikido Security found 15 malicious JetBrains Marketplace plugins that silently stole OpenAI and DeepSeek API ...
LiteLLM CVE Chain: A Default User Account Becomes Full Server Access
Three vulnerabilities chain from a default LiteLLM user to full RCE. CISA confirmed active exploitation ...
GrapheneOS Ported to Android 17: What Changes Now
GrapheneOS has been ported to Android 17 with official releases coming soon. Here's what the port delivers, what Play Integrity still blocks, and ...
144 Mastra npm Packages Backdoored: What to Check Right Now
144 @mastra npm packages were compromised today via a hijacked contributor account and typosquatted easy-day-js ...
OpenAI Deployment Simulation: How OpenAI Predicts Model Behavior Before Release
OpenAI’s new Deployment Simulation method predicts how AI models will misbehave in production before they ...
Apple Hide My Email Moves to New Domain — What Changes for Privacy
Apple is migrating Hide My Email and Sign in with Apple to @private.icloud.com. Here's what ...
Claude Managed Agents: Self-Hosted Sandboxes and MCP Tunnels in Beta
Anthropic shipped self-hosted sandboxes (public beta) and MCP tunnels (research preview) for Claude Managed Agents ...