GPT-5.6 Finds $500K WordPress Exploit in 10 Hours for $25
A researcher used GPT-5.6 Sol to find a pre-auth WordPress RCE chain in 10 hours for $25. Exploit brokers pay $500k for this. ...
Romania’s Land Registry Was Wiped. One Backup Saved It.
A hacker wiped Romania’s entire land registry database on July 14, 2026. Every backup was ...
Python 3.14 T-Strings: Fix SQL Injection and XSS With One Change
Python 3.14 introduced t-strings via PEP 750. Learn how they prevent SQL injection and XSS ...
Chatto: Open-Source Slack Alternative With Per-User Encryption
Chatto went open source July 8 — single binary, SSO included free, per-user crypto-shredding on ...
Refuse: Block Vulnerable Package Installs Before Your AI Agent Ships Them
Refuse is a pre-install package manager shim that blocks vulnerable installs across npm, pip, cargo, ...
1Password for Claude: AI Agents Log In Safely
1Password for Claude lets AI agents complete logins without ever seeing your passwords. Here is how the zero-exposure credential injection architecture works.
Ledger Agent Stack: AI Proposes, Hardware Enforces
Ledger launched Agent Stack on July 15 — open-source tools that let AI agents prepare ...
VulnHunter: Capital One’s Open-Source AI Security Tool
Capital One open-sourced VulnHunter — an agentic AI scanner that reasons like an attacker and ...
Debian 13.6: Secure Boot Fix and 244 Patches to Apply Now
Debian 13.6 ships 244 fixes including a critical Secure Boot CA update, 13 curl CVEs, ...
Microsoft July 2026 Patch Tuesday: 570 CVEs, 3 Zero-Days
Microsoft’s record July 2026 Patch Tuesday fixes 570 vulnerabilities and 3 zero-days. SharePoint and AD ...