Adobe ColdFusion: 7 CVSS 10.0 Flaws — Patch Now
Adobe APSB26-68 patches 11 ColdFusion vulnerabilities, seven at CVSS 10.0. One is already being exploited. Here is what is exposed and exactly what ...
Claude API Workload Identity Federation: Drop Keys Now
Anthropic's Workload Identity Federation is now GA. Replace your static Claude API key with short-lived ...
Google Rejected the YouTube Studio Prompt Injection Bug. Creators Are Still at Risk.
YouTube's Ask Studio had a stored prompt injection flaw that exposed private video titles. Google ...
Bad Epoll CVE-2026-46242: Patch Your Linux Kernel Now
CVE-2026-46242 Bad Epoll lets any local Linux user become root with 99% reliability. No workaround ...
Slopsquatting: Your AI Coding Agent Is Now a Supply Chain Risk
AI coding agents hallucinate package names — and attackers register them. Here is how slopsquatting ...
JetBrains Critical Vulnerabilities: Patch Hub and IntelliJ
JetBrains patched a CVSS 9.8 Hub flaw enabling unauthenticated account takeover. Self-hosted Hub, IntelliJ IDEA, YouTrack, and Kotlin all need immediate updates.
Project Glasswing: AI Found 10,000 Vulns. Patching Is the Hard Part.
Anthropic's Project Glasswing used Claude Mythos to find 10,000+ critical vulnerabilities in open source software. ...
DuneSlide: Critical Cursor IDE Flaws Allow Zero-Click RCE
Two critical Cursor IDE vulnerabilities (CVE-2026-50548, CVE-2026-50549) enable zero-click RCE via prompt injection. Patch to ...
Strix: AI Pentest Agent Hits 34K Stars — Try It Now
Strix hits 34K GitHub stars as AI code CVEs surge 6x in three months. The ...
ChocoPoC: Malware Hiding in GitHub PoC Repos — Act Now
A new Python RAT named ChocoPoC hides in GitHub PoC dependencies, not the exploit file ...