Tailscale Disables TPM Encryption: Security-by-Default Fails
Tailscale disabled TPM state file encryption by default Jan 7, 2026 after firmware updates broke clients. When security-by-default backfires in production.
NPM Staged Publishing: $50M Attack Forces Security Shift
npm announced staged publishing in January 2026, requiring review periods before packages go live. The ...
VS Code Fork Vulnerability: 500 Devs Hit by Supply Chain Attack
The Hidden Vulnerability Your AI-powered coding assistant may have just recommended malware. Security researchers at ...
IBM API Connect 9.8 CVSS Auth Bypass Hits 1,000+ Firms
A critical authentication bypass vulnerability in IBM API Connect allows remote attackers to gain unauthorized ...
38 State Tech Laws Hit Jan 1, 2026: AI Transparency Clash
On January 1, 2026, developers woke up to a new reality: 38 state tech laws ...
React2Shell: 90K+ Next.js Apps Hit by 10.0 CVSS RCE
Within hours of its December 3, 2025 disclosure, China state-sponsored hackers were already exploiting it. React2Shell (CVE-2025-55182)—a critical 10.0 CVSS vulnerability in React ...
API Security 2026: 99% Hit, 400% Surge, $186B Cost
Ninety-nine percent of organizations suffered at least one API security incident in 2025. API attacks ...
California DROP: Delete Data From 500+ Brokers Now
California just automated privacy rights enforcement at scale. The state launched DROP (Delete Request and ...
Microsoft Kills Windows Offline Activation After 24 Years
Microsoft killed Windows phone activation on Dec 3, 2025, forcing users to an online portal ...
Rust Enterprise Migration 2026: Microsoft, Google, Meta Race to Replace C++
CISA’s January 1, 2026 deadline for memory safety roadmaps has transformed Rust from a developer ...