YellowKey & GreenPlasma: Two Windows Zero-Days With No Patch
A rogue researcher dropped two unpatched Windows zero-days — YellowKey bypasses BitLocker via USB; GreenPlasma escalates to SYSTEM. Here’s what to do now.
PraisonAI CVE-2026-44338: Auth Off by Default, Exploited Fast
CVE-2026-44338 left PraisonAI open to unauthenticated workflow execution. Attackers were scanning within 4 hours. Check ...
GitHub Breached via Malicious VS Code Extension (2026)
GitHub confirmed this week that a threat actor called TeamPCP exfiltrated approximately 3,800 internal repositories ...
Wasp Ditched Its Own Language After 5 Years — Why It Matters
Wasp spent 5 years and $5M building a custom DSL for full-stack web development. Here's ...
NGINX Rift (CVE-2026-42945): Patch Now or Get Exploited
NGINX Rift is a critical heap buffer overflow actively exploited since May 16. Here is ...
Android AppFunctions: Every Android App Is Now an MCP Server
Google's AppFunctions API lets Android apps expose on-device MCP-equivalent tools for Gemini agents. Here's the code pattern, the comparison to server MCP, and ...
Anna’s Archive $19.5M Judgment: The AI Data Verdict
Publishers just called Anna's Archive an AI training hub, not just a piracy site. The ...
Gemini Spark: Google’s 24/7 AI Agent for Developers
Gemini Spark is Google's persistent AI agent launched at I/O 2026. Learn how Antigravity 2.0 ...
Cursor SDK: Build Programmatic AI Coding Agents in TypeScript
Cursor's new @cursor/sdk npm package turns its agent runtime into deployable infrastructure. Learn what it ...
Gemini API Managed Agents: Full Sandbox, One API Call
Google shipped Gemini API Managed Agents at I/O 2026: spin up a fully sandboxed AI ...