Fable 5 Export Ban: ‘Fix This Code’ Wasn’t a Jailbreak
Fable 5 was banned globally over a 'fix this code' prompt, not a jailbreak. 300+ security experts call it dangerous—and Zhipu AI is ...
Amazon Linux 2 EOL June 30: Migrate Your Lambda Functions Now
Amazon Linux 2 hits end of life June 30, 2026. Six Lambda runtimes are affected. ...
ForceMemo: GlassWorm Is Now Inside Python Repos
GlassWorm's ForceMemo campaign backdoored 400+ Python repositories using stolen GitHub tokens and force-push techniques that ...
CVE-2026-45657 and CVE-2026-47291: Patch These Now
Two CVSS 9.8 wormable Windows flaws from June 2026 Patch Tuesday need immediate action. Here ...
That LinkedIn Job Offer Hid a Backdoor in npm install
A developer almost got owned by a LinkedIn recruiter's GitHub repo. The backdoor was in ...
OWASP AISVS 1.0: The AI Security Checklist Developers Need
OWASP AISVS 1.0 delivers 514 testable AI security requirements across 14 chapters. Here are the chapters that matter most for developers shipping AI ...
curl Takes July Off After AI Slop Killed Its Bug Bounty
curl's July vulnerability blackout stems from an AI slop crisis that killed its bug bounty ...
CVE-2026-45591: Patch ASP.NET Core SignalR DoS Now
CVE-2026-45591 lets unauthenticated attackers crash ASP.NET Core via SignalR MessagePack. Patch to .NET 8.0.28, 9.0.17, ...
LangGraph RCE: Patch Your AI Agent Checkpointers Now
Three now-patched CVEs in LangGraph chain SQL injection into remote code execution via unsafe msgpack ...
Spring AI Vector Store RCE: Patch Before June 30 EOL
CVE-2026-22738 gives unauthenticated attackers RCE on Spring AI apps via SpEL injection in SimpleVectorStore. Spring ...