Wasmtime Cranelift Sandbox Escape: Two CVSS 9.9 CVEs
Two Wasmtime Cranelift sandbox escape CVEs rated CVSS 9.9 let crafted WebAssembly modules escape their runtime. One has a working public exploit. Check ...
GitHub Octoverse 2026: AI Agents Start 40% of Pull Requests
GitHub’s Octoverse 2026 report landed Tuesday with a number that rewrites the job description: AI ...
PHP2Shell: Critical PHP RCE — Patch Now
PHP2Shell (CVE-2026-109618 & CVE-2026-109619) is actively exploited unauthenticated RCE. 32M services still vulnerable. Patch steps ...
OpenAI Is Cutting Off Cursor on November 12 — Act Now
OpenAI is pulling its models from Cursor on November 12 — thirteen days from today. ...
DoorDash Buys Instacart for $17B — Developers Take Note
DoorDash acquires Instacart in a $17B deal that reshapes grocery delivery APIs and retail commerce. ...
GitHub Copilot Fusion Is GA: Model Routing That Halves AI Coding Costs
GitHub Copilot Fusion is now generally available. The model router cuts AI coding costs by 51% using three execution patterns. Here is what ...
LiteLLM Shipped Malware on October 21 — 49K Downloads Before Anyone Noticed
On October 21, 2026, someone with maintainer access to LiteLLM pushed a poisoned release — ...
EMBRACE: AI Coding Tools Leaking SSH Keys — Two Unpatched
Forever Security's EMBRACE research found VS Code and Codex can drain SSH keys and credentials ...
Binance Lost $5.8B to EIP-7702: What Ethereum Devs Must Do
Binance lost $5.8B on October 29 — the largest crypto hack ever. The Ethereum attack ...
Visual Studio October 2026: Bulk Conflicts, Hot Exit
Visual Studio's October 2026 update ships bulk merge conflict resolution, Hot Exit for unsaved files, ...