MCP Tool Poisoning: OWASP MCP Top 10 Developer Guide
OWASP published its MCP Top 10 security framework in 2026. Here's what tool poisoning is, the real CVE stats, and a four-week hardening ...
RAMPART and Clarity: Microsoft’s AI Agent Safety Testing Kit
Microsoft open-sourced RAMPART and Clarity — a pytest-native framework and design-review agent that bring shift-left ...
Socket Raises $60M, Acquires Secure Annex: IDE Is Now the Perimeter
Socket closed $60M in Series C funding and acquired Secure Annex to extend supply chain ...
Chrome DBSC Is Live: What Developers Must Do Now
Chrome's Device Bound Session Credentials (DBSC) went GA for Google Workspace on May 25. Here ...
TanStack npm Attack: The Worm That Forged SLSA Provenance
The Mini Shai-Hulud worm hit 42 TanStack npm packages in a six-minute window and produced ...
Python 3.14 t-Strings: Safer Templating Over f-Strings
Python 3.14 t-strings return a Template object instead of a string, letting you build injection-safe SQL queries and auto-escaping HTML in ten lines ...
Claude Compliance API: 28 Security Integrations and the Gap You Must Know
Anthropic's Claude Compliance API now connects to 28 enterprise security platforms including Cloudflare, CrowdStrike, Datadog, ...
npm Typosquatting: 14 Packages Steal Your AWS and CI/CD Secrets
14 malicious npm packages impersonating OpenSearch and ElasticSearch stole AWS credentials, Vault tokens, and CI/CD ...
Docker Model Runner CVE-2026-5843: Two Flaws That Let a Bad Model Own Your Mac
Two high-severity CVEs in Docker Model Runner let any container execute code on your macOS ...
Rust 1.96.0: Copyable Ranges, assert_matches, and Two Cargo CVEs
Rust 1.96.0 ships copyable range types (RFC 3550), stabilizes assert_matches!, improves Cargo for private registries, ...