CVE-2025-48595: Android Zero-Day Exploited — Act Now
Google's June 2026 Android patch fixes CVE-2025-48595, an actively exploited Framework zero-day. CISA deadline: June 5. Here's what Android developers must do now.
CVE-2026-44338: PraisonAI Auth Bypass Exploited in 4 Hours
PraisonAI CVE-2026-44338 ships authentication disabled by default. Versions 2.5.6-4.6.33 are vulnerable. Here is what attackers ...
Google Catches First AI-Built Zero-Day: Act Now
Google's Threat Intelligence Group caught the first confirmed AI-generated zero-day exploit in the wild — ...
Sound Blaster Speaker Hack: No Patch, No Pairing Needed
A researcher turned the Creative Sound Blaster Katana V2X into a remote keystroke injector via ...
Microsoft MXC SDK: Sandbox Your AI Agents on Windows
Microsoft's MXC SDK lets you sandbox AI agents at the OS level with a JSON ...
AI Coding Agent Vulnerabilities: TrustFall and SymJack Explained
TrustFall and SymJack expose a systemic RCE flaw in Claude Code, Cursor, and GitHub Copilot. One cloned repo and one Enter keypress is ...
Let’s Encrypt Commits to Post-Quantum HTTPS: Act Now
Let’s Encrypt commits to Merkle Tree Certificates for post-quantum HTTPS — and there’s a server ...
VSCode Bug Steals Your GitHub Token: Patch Pending
A VSCode exploit disclosed today steals your GitHub token with one click on a crafted ...
CVE-2026-3854: GitHub Enterprise RCE via Git Push — Patch Now
CVE-2026-3854 lets any authenticated GitHub Enterprise Server user execute code via git push. 88% of ...
Flux.ai Silences Adafruit With Legal Threat — Devs Furious
Adafruit Industries, the NYC-based open-source hardware company beloved by makers and developers for over 15 ...