AI Coding Tools Expose You via git.exe — Vendors Won’t Fix
Cursor, Copilot CLI, Gemini CLI, and Codex all have the same binary planting RCE flaw. Seven months later, only AWS Kiro fixed it. ...
Visual Studio 2026 July Update: Agent Skills and Copilot Billing Fix
Visual Studio 2026's July update ships built-in .NET and Azure Agent Skills plus a configurable ...
Dependabot Now Waits 3 Days to Update Your Dependencies
GitHub changed how Dependabot works on July 14, 2026. The update tool now enforces a ...
Go 1.26.5 Patches ECH Privacy Leak and Symlink Escape — Update Now
Go 1.26.5 fixes two security vulnerabilities: an ECH privacy leak in crypto/tls and a symlink ...
GitHub Copilot Agentic Autofix: Verified Fixes, Auto PR
GitHub's agentic autofix runs CodeQL, verifies the fix works, and opens a draft PR — ...
Node.js Drops Odd Releases: What the New LTS Model Means
Node.js is moving to one major release per year starting with Node 27. Every version becomes LTS. Here is what changes for your ...
TS-2026-009: Tailscale SSH Root Bypass, Patch Now
Tailscale SSH TS-2026-009 lets any SSH user get root by logging in as '-i', bypassing ...
Microsoft Patch Tuesday July 2026: 570 Flaws, 3 Zero-Days
Microsoft patched a record 570 vulnerabilities in July 2026, including 2 exploited zero-days. Here is ...
Bonsai 27B Runs on iPhone: The On-Device AI Tradeoffs
PrismML shrinks a 27B model to 3.9GB for iPhone. Benchmarks look solid, but developer reports ...
Cursor IDE RCE: Unpatched git.exe Flaw Goes Public
Security researchers at Mindgard published a full disclosure today of an unpatched Cursor IDE RCE ...