WWDC 2026: What Every Developer Must Know Before June 8
WWDC 2026 runs June 8–12. SiriKit is being deprecated, Siri 2.0 opens to Claude and Gemini, and Foundation Models gets a production upgrade. ...
Drupal CVE-2026-9082: Patch Now or Get Owned
Drupal's highly critical SA-CORE-2026-004 (CVE-2026-9082) is a no-auth SQL injection on PostgreSQL sites. Patch to ...
Nx Console VSCode Extension Hijacked: Act Now
The Nx Console VS Code extension was backdoored for 18 minutes on May 18. 6,000+ ...
YellowKey & GreenPlasma: Two Windows Zero-Days With No Patch
A rogue researcher dropped two unpatched Windows zero-days — YellowKey bypasses BitLocker via USB; GreenPlasma ...
PraisonAI CVE-2026-44338: Auth Off by Default, Exploited Fast
CVE-2026-44338 left PraisonAI open to unauthenticated workflow execution. Attackers were scanning within 4 hours. Check ...
GitHub Breached via Malicious VS Code Extension (2026)
GitHub confirmed this week that a threat actor called TeamPCP exfiltrated approximately 3,800 internal repositories — not by exploiting a GitHub vulnerability, but ...
Wasp Ditched Its Own Language After 5 Years — Why It Matters
Wasp spent 5 years and $5M building a custom DSL for full-stack web development. Here's ...
NGINX Rift (CVE-2026-42945): Patch Now or Get Exploited
NGINX Rift is a critical heap buffer overflow actively exploited since May 16. Here is ...
Android AppFunctions: Every Android App Is Now an MCP Server
Google's AppFunctions API lets Android apps expose on-device MCP-equivalent tools for Gemini agents. Here's the ...
Anna’s Archive $19.5M Judgment: The AI Data Verdict
Publishers just called Anna's Archive an AI training hub, not just a piracy site. The ...