Nx Console VSCode Extension Hijacked: Act Now
The Nx Console VS Code extension was backdoored for 18 minutes on May 18. 6,000+ developers exposed. Here is what was stolen and ...
YellowKey & GreenPlasma: Two Windows Zero-Days With No Patch
A rogue researcher dropped two unpatched Windows zero-days — YellowKey bypasses BitLocker via USB; GreenPlasma ...
PraisonAI CVE-2026-44338: Auth Off by Default, Exploited Fast
CVE-2026-44338 left PraisonAI open to unauthenticated workflow execution. Attackers were scanning within 4 hours. Check ...
GitHub Breached via Malicious VS Code Extension (2026)
GitHub confirmed this week that a threat actor called TeamPCP exfiltrated approximately 3,800 internal repositories ...
Wasp Ditched Its Own Language After 5 Years — Why It Matters
Wasp spent 5 years and $5M building a custom DSL for full-stack web development. Here's ...
NGINX Rift (CVE-2026-42945): Patch Now or Get Exploited
NGINX Rift is a critical heap buffer overflow actively exploited since May 16. Here is what triggers it, how to patch, and what ...
Android AppFunctions: Every Android App Is Now an MCP Server
Google's AppFunctions API lets Android apps expose on-device MCP-equivalent tools for Gemini agents. Here's the ...
Anna’s Archive $19.5M Judgment: The AI Data Verdict
Publishers just called Anna's Archive an AI training hub, not just a piracy site. The ...
Gemini Spark: Google’s 24/7 AI Agent for Developers
Gemini Spark is Google's persistent AI agent launched at I/O 2026. Learn how Antigravity 2.0 ...
Cursor SDK: Build Programmatic AI Coding Agents in TypeScript
Cursor's new @cursor/sdk npm package turns its agent runtime into deployable infrastructure. Learn what it ...