CVE-2026-48907: Joomla JCE RCE Is Actively Exploited — Patch Now
CISA flagged CVE-2026-48907 in Joomla Content Editor as actively exploited. CVSS 10.0, no auth required. How to patch JCE to 2.9.99.6 and check ...
Kiro for iOS: Monitor Agentic Coding Sessions From Your Phone
AWS launched Kiro for iOS at Summit NYC — a native app to supervise, steer, ...
15 JetBrains Plugins Stole AI API Keys — 70,000 Installs
Aikido Security found 15 malicious JetBrains Marketplace plugins that silently stole OpenAI and DeepSeek API ...
Snap SPECS AR Glasses: Claude Code Meets Spatial Computing
Snap's SPECS AR glasses launched June 16 at $2,195 with Lens Studio AI — Claude ...
GitHub Copilot App Goes GA: Cloud Automations Are Live Now
GitHub Copilot App is generally available today for all Copilot subscribers. Cloud Automations, stable SDK, ...
Epic Games Open-Sources Lore: A VCS Built for Binary Files
Epic Games open-sourced Lore at State of Unreal 2026: a Rust-based, MIT-licensed VCS with chunked binary storage that challenges Git LFS and Perforce.
GitHub Agentic Workflows Is in Public Preview Now
GitHub Agentic Workflows hit public preview June 11. Write CI automation in Markdown, compile to ...
LiteLLM CVE Chain: A Default User Account Becomes Full Server Access
Three vulnerabilities chain from a default LiteLLM user to full RCE. CISA confirmed active exploitation ...
RFC 10008: HTTP QUERY Method Ends the POST Workaround
RFC 10008 standardizes the HTTP QUERY method: safe, idempotent, and body-capable. Here is what it ...
GrapheneOS Ported to Android 17: What Changes Now
GrapheneOS has been ported to Android 17 with official releases coming soon. Here's what the ...