Proto6: Six protobuf.js Vulnerabilities Expose Node.js to RCE
Cyera Research disclosed 6 CVEs in protobuf.js (Proto6) on June 10, 2026. Two achieve RCE — one in CI/CD pipelines. Patch to 7.5.6 ...
GitHub Bot PRs Now Trigger CI — With One Required Approval
GitHub now lets github-actions[bot]-created PRs trigger CI/CD workflows after maintainer approval. Here is what changed ...
CVE-2026-20253: Patch Splunk Enterprise Before This RCE Hits
Splunk Enterprise 10.x has a CVSS 9.8 pre-auth RCE in the PostgreSQL Sidecar Service. Check ...
VS Code 1.124: Autopilot Is Now On by Default
VS Code 1.124 shipped June 10 and flipped one switch that affects every developer who ...
Node.js June 17 Security Patch: HIGH Severity Hits 22.x, 24.x, 26.x
Node.js releases a HIGH severity security patch on June 17 for all active lines (22.x, ...
Cisco Live Protect Closes the AI Exploit Gap Without a Reboot
Cisco Live Protect uses eBPF shields on Nexus 9000 to close the CVE exploit window without reboots. Plus: the new twice-monthly advisory schedule ...
Colorado Rewrote Its AI Law: What Developers Need to Know
Colorado replaced SB 24-205 with SB 26-189 before it took effect. Risk management mandates and ...
CVE-2026-50751: Patch Check Point VPN Before Qilin Hits You
A Qilin ransomware affiliate exploited Check Point VPN CVE-2026-50751 for 32 days before the patch ...
Python 3.14 T-Strings: Safer SQL, HTML, and AI Prompts
Python 3.14.6 shipped June 10. T-strings now have library support via SQLAlchemy 2.1. Here's how ...
Agentjacking: The Fake Bug Report That Hijacks Your AI Coding Agent
A new attack class lets anyone with your Sentry DSN hijack Claude Code, Cursor, or ...