MCP 2026-07-28 Spec Ships July 28: Six Breaking Changes to Fix Now
The MCP 2026-07-28 specification finalizes July 28. Sessions are gone, the initialize handshake is removed, and six breaking changes require immediate action. Migration ...
ViteVenom: 7 Fake npm Packages Use Blockchain to Deliver RATs
Seven malicious npm packages impersonating @vitejs/* deliver a RAT via blockchain C2 — infrastructure that ...
AI Code Is Shipping Vulnerabilities at Scale: The 2026 Data
Georgia Tech tracked 74 CVEs from AI-generated code in 2026. Enterprise data shows 10x more ...
Google Cloud Run Sandboxes: AI Code Execution for Free
Google Cloud Run Sandboxes hit public preview July 10. Run isolated AI agent code execution ...
Cloudflare Precursor: Session-Wide Bot Detection Explained
Cloudflare Precursor monitors entire browsing sessions to catch AI bots that pass CAPTCHAs. Here's how ...
LG Monitor Adware: Windows Update Installs It Without Asking
LG gaming monitors install McAfee adware through Windows Update without asking. The app claims all system resources. Here is what happened and how ...
Firefox 152 and Chrome 150: Patch Your CI Environments
Mozilla and Google shipped critical browser patches July 14-15. Public exploit code is out for ...
wp2shell: The WordPress RCE You Need to Patch Today
WordPress 7.0.2 patches a critical pre-auth RCE (CVE-2026-63030). No login required to exploit. Here is ...
TP-Link Kasa: Your Security Camera Leaked Home GPS
TP-Link's Kasa cameras leaked your home GPS with one UDP packet — no login needed. ...
ClaudeBleed: Claude for Chrome Lets Rogue Extensions Read Gmail
A trust-boundary flaw in Claude for Chrome lets malicious extensions silently read your Gmail, Docs, ...