NVIDIA’s Open Secure AI Alliance: What Agent Devs Need
NVIDIA launched the Open Secure AI Alliance with 37+ members. Here's what's production-ready, what's still vaporware, and what you should do right now.
Pass-TA-Key Attacks: Steal All Google Passkeys With Malware
Palo Alto Unit 42 exposed three attacks that hijack Google-synced passkeys via malware. The Golden ...
vlt 1.0: Switch From npm Before Your Next Incident
The team that built npm just shipped its replacement. vlt 1.0 — pronounced “volt” — ...
Apple OpenAI: iCloud Left iPhone Secrets Unlocked
Apple's lawsuit expands: iCloud kept iPhone secrets syncing to personal devices after 13 ex-employees left ...
EU AI Act Article 50 Is Live: Fix Your AI App Now
EU AI Act Article 50 went live August 2. Chatbot disclosures and AI content labels ...
Keyv npm Supply Chain Attack: Shai-Hulud Hits 2B Installs
Keyv and 868 npm packages compromised by Shai-Hulud worm malware today — over 2B monthly installs at risk. Steals credentials, spreads via npm ...
LLM Slop CVEs: 54 Fake Vulnerabilities Hit NVD — Act Now
JFrog found 54 AI-generated fake CVEs — 6 targeting SQLite with CVSS 9.8 — that ...
OpenAI Astra Solves 10 Decade-Old Math Problems for $2,000
OpenAI revealed Astra by solving 10 decade-old math problems for $2,000 with Lean 4 proofs. ...
7-Zip CVE-2026-58052: The MotW Bypass Nobody Patched
7-Zip 26.02 has an actively exploited Mark-of-the-Web bypass (CVE-2026-58052) with no official patch. Here is ...
PostgreSQL 18.4: 11 Security CVEs Fixed — Patch It Without Downtime
PostgreSQL 18.4 patches 11 CVEs — including a CVSS 8.8 RCE in the refint module ...