Langflow CVE-2026-9198: Patch Now or Lose Your API Keys
CISA flagged a critical RCE in Langflow. Attackers can gain full control and steal every credential stored in your flows with just two ...
HackerOne Requires ID by Aug 14: What Researchers Must Do
HackerOne mandates government ID verification for bug bounty submissions starting August 14. Here is what ...
Datadog Application Keys Are Going Legacy: Migrate Before Q3 2026 Closes
Datadog’s application keys are going legacy this quarter — and Q3 2026 closes in weeks. ...
AI Patches Fail 74% of the Time: What 1Password Found
1Password tested 6,080 AI-generated vulnerability patches from frontier models. Only 26% fully worked. Here is ...
California SB 942 Is Live: What AI Builders Owe C2PA Now
California SB 942 is live and Midjourney has no watermark. AI image builders face $5,000/day ...
ChainDrop Worm Hits 400 npm Packages: Rotate Credentials Now
ChainDrop npm worm hit keyv and 443 more packages on August 4. It steals AWS, GitHub, and Claude Code credentials. Here's the exact ...
Paperclip AI CVSS 10 Flaw Lets Attackers Run Host Commands
Paperclip AI has a CVSS 10.0 RCE vulnerability. An unauthenticated attacker can execute commands on ...
OpenAI AI Agent Hacked Hugging Face: Defenders Blocked
OpenAI’s AI agents didn’t go rogue last month — they cheated on a test. During ...
Claude Security Plugin Beta: Scan Code in Your Terminal
Anthropic shipped the Claude Security plugin for Claude Code on July 22, and it is ...
NatJack: NAT Attack Hits Every OS — No Full Patch
NatJack, disclosed at Black Hat 2026, exploits NAT connection tracking to hijack TCP sessions and ...