VSCode Bug Steals Your GitHub Token: Patch Pending
A VSCode exploit disclosed today steals your GitHub token with one click on a crafted link. No patch confirmed yet. Here's what happened ...
CVE-2026-3854: GitHub Enterprise RCE via Git Push — Patch Now
CVE-2026-3854 lets any authenticated GitHub Enterprise Server user execute code via git push. 88% of ...
Flux.ai Silences Adafruit With Legal Threat — Devs Furious
Adafruit Industries, the NYC-based open-source hardware company beloved by makers and developers for over 15 ...
Project Glasswing Expands: Claude Mythos Found 10,000+ Critical Bugs
Anthropic's Project Glasswing just expanded to 150 organizations. Claude Mythos found 10,000+ critical vulnerabilities autonomously. ...
Trump AI Executive Order: 30-Day Review Hits Frontier Models
Trump signed an AI executive order requiring voluntary 30-day reviews of frontier models. "Voluntary" is ...
Supabase Passkeys: Drop Passwords From Your App Today
Supabase Auth ships native passkey support in beta. Two API calls give your users Face ID, Touch ID, and Windows Hello sign-in. Here ...
Microsoft Defender Zero-Days: What Developers Must Do Now
The tool running on 1.4 billion Windows machines to stop attackers became the attack surface. ...
TeamPCP Backdoors Checkmarx Jenkins Plugin: Your Security Scanner Is the Backdoor
TeamPCP's CVE-2026-33634 backdoored the Checkmarx Jenkins AST plugin for 31+ hours. Check your version, rotate ...
VulnCheck 2026: KEV Surge 59%, AI Weaponizes CVEs in 21 Days
VulnCheck's 2026 Exploit Intelligence Report shows known exploited vulnerabilities are up 59% year-over-year. The average ...
Miasma Attack Poisons 32 Red Hat npm Packages — And SLSA Didn’t Help
Miasma attack hit 32 Red Hat npm packages, 117K weekly downloads. SLSA provenance attestations passed ...