10,000 Trojan GitHub Repos Are Targeting AI Agents — Audit Your Dependencies Now
Over 10,000 malicious GitHub repositories have been serving Trojan ZIPs for 18 months, now targeting AI coding agents. Here is how the attack ...
Megalodon: 5,561 GitHub Repos Backdoored in Six Hours — Rotate Your CI Secrets Now
Megalodon backdoored 5,561 GitHub repos in 6 hours, stealing 449 GB of CI secrets including ...
AKS Container Escape CVE-2026-32193: Patch Your Nodes Now
CVE-2026-32193 is a CVSS 8.8 container escape in Azure Kubernetes Service. Here is how to ...
MCP Security Crisis: 40% of Servers Have No Auth
12,520 MCP servers are publicly exposed. 40% have zero authentication. VIPER-MCP found 106 zero-days. Here ...
OpenAI Codex Bug Writes 640 TB/Year to Your SSD
OpenAI Codex has a bug that writes up to 640 TB/year to your local SSD ...
15 Malicious JetBrains Plugins Stole AI API Keys — Revoke Yours Now
Fifteen JetBrains Marketplace plugins with 70,000 installs secretly stole AI API keys for 8 months. Here is how the attack worked and what ...
NGINX 1.31.2: Patch the HTTP/3 QUIC Use-After-Free Now
F5 patched three critical NGINX vulnerabilities on June 17. CVE-2026-42530 (CVSS 9.2) hits HTTP/3 QUIC ...
pnpm 11.7: frozenStore, Batch Publish, and Scope Auth Tokens
pnpm 11.7 ships frozenStore for read-only Nix and OCI installs, atomic batch publishing for monorepos, ...
Python t-Strings: Stop Using f-Strings for SQL and HTML
Python 3.14.6 landed on June 10 — a quiet maintenance release with 179 bugfixes. Buried ...
GitHub Actions Now Blocks Untrusted Workflow Triggers
GitHub shipped workflow execution protections and a safer checkout default on June 18. Here's what ...