MCP Goes Stateless: What the July 28 Spec RC Breaks
The MCP 2026-07-28 release candidate is the largest protocol revision since launch. Sessions are gone, new headers are required, and the Tasks API ...
CVE-2026-26268: Cursor AI RCE via Git Hooks — Patch Now
CVE-2026-26268 lets attackers run code on your machine when Cursor's agent clones a malicious repo. ...
Secure Boot Certificates Expire June 27: Act Now
Microsoft's 2011 Secure Boot certificates expire June 24-27. Windows Server won't auto-update. Here's your 30-day ...
Chromium’s Unfixed Service Worker Flaw Creates Browser Botnets
Google accidentally leaked PoC exploit code for a 42-month-old Chromium flaw that silently turns browsers ...
Grok Build: xAI’s Coding Agent CLI Enters the Race — Honest Review
xAI launched Grok Build, a terminal-native coding agent with parallel subagents and Plan Mode. Here's ...
Microsoft Copilot Cowork Exfiltrates Your Files — No Approval Required
Microsoft’s enterprise AI agent can be manipulated to silently send your organization’s files to an attacker — and it doesn’t ask for permission. ...
GitHub Copilot Moves to AI Credits on June 1: What Changes
GitHub Copilot drops PRUs for token-metered AI Credits on June 1. Here is what changes, ...
California’s AB 1856 Exempts Linux — SteamOS Is Not Safe
California's AB 1856 exempts Linux distros from age-verification, but SteamOS is still caught. Here's who ...
GPT-5.5 for Agentic Coding: A Practical Developer Guide
GPT-5.5 hit 88.7% on SWE-Bench Verified and cut hallucinations by 60%. But the price doubled. ...
Playwright MCP in Production: Auth, Shadow DOM, Tokens
Playwright v1.56 ships built-in AI agents. Here's what breaks in production: CI authentication, Shadow DOM ...