EU Cyber Resilience Act: 24-Hour Reporting Is Live
The EU Cyber Resilience Act's vulnerability reporting obligations activated September 11. Here's the 3-stage timeline, who's covered, and 5 actions to take now.
JadePuffer Storm-3168 Wiped Azure in 7 Min — Audit Now
Storm-3168/JadePuffer wiped an Azure tenant in 7 minutes using a service principal secret found in ...
Visual Studio 2026 v18.10: BYOK, Profiler Agent, and the Breaking Change
Visual Studio 2026 v18.10 ships BYOK for Anthropic and OpenAI, a Profiler Agent with real ...
Nvidia OpenShell Is Live — Sandbox Your AI Agents Now
Nvidia OpenShell is an open-source runtime that puts AI agents in kernel-level sandboxes using Landlock ...
ShinyHunters Bypass Oracle PeopleSoft WAF — Patch Now
ShinyHunters are exploiting CVE-2026-35273 in Oracle PeopleSoft by encoding one character to bypass WAF rules. ...
LiteLLM CVE-2026-59822: First MCP Flaw on CISA’s Exploit List — Patch Now
CVE-2026-59822 is the first MCP vulnerability on CISA's Known Exploited Vulnerabilities list. LiteLLM's auth bypass gives attackers full gateway access. Patch to v1.84.0 ...
JDK 27 Is Out — Post-Quantum TLS, Compact Headers, and What to Do
JDK 27 ships post-quantum TLS 1.3, compact object headers (10–20% heap reduction), and G1 as ...
Citrix NetScaler RCE Zero-Days Exploited — Patch Now
Two actively exploited RCE zero-days in Citrix NetScaler ADC and Gateway were patched September 27, ...
AI Agents Broke Two RSA Records in 16 Days — Act Now
Two AI coding agents broke RSA factoring records 16 days apart in September 2026. No ...
Salmon EVI: Cryptographic Proof Your AI Agent Behaved
Archipelo launched Salmon EVI on Sept 25 — a cryptographic layer that verifies what your ...