Frameworks, tooling, and shipping — from people who do it daily.
Cloudflare says traffic from AI pentest orchestrators grew 30x since October 1, with 50+ framework families scanning customers. Static CI/CD tokens were the way in. Expire yours.
Attackers used Check Point zero-day CVE-2026-123039 to get root on Gaia gateways, then wiped servers. Install the new Jumbo Hotfix and hunt for compromise.
The wfx-loot campaign ran a CI secret stealer in at least 1,806 GitHub repositories and left Azure and AWS backdoors. Rotate secrets, then hunt persistence.
Attackers hit 21 N-central servers with the 4EverAble2Shell zero-day, 19 of them on Hotfix 2. Ask your MSP for the Legacy API setting and a compromise check.
LangChain raised a $300M Series C at a $3B valuation, led by CapitalG. LangSmith now runs, tests and governs agents. Keep your traces and evals portable.
Security firm Claroc found 35,578 Grok Build apps open with no sign-in. The link is not a secret: DNS records it. Audit each AI-built app your team published.
The GitBook breach started with an SSO flaw and ended with full production access. GitBook treats all customer data as exposed. Rotate your tokens and secrets.
LMSYS launched the SGLang Consortium with Nvidia, AMD, Intel, Google, Meta and Cloudflare. Big backers, no announced security process. You still patch.
Perplexity's Escaping SPACE Part II found CTF-style prompts kept agents away from the sandbox boundary under test. Measure coverage, not only pass or fail.
OpenAI launched Daybreak Red Team, AI pentesting for web apps, and Defense Factory, agents that write patches. Early access, no pricing, humans approve merges.
The November 11 Node.js security release fixes 16 CVEs, seven High, in HTTP/2, HTTPS and TLS. Upgrade to 22.23.5, 24.22.3 or 26.13.1 this week.
A Microsoft 365 outage on November 12 took down Outlook, Teams, SharePoint and Copilot. What Microsoft said, and the email-down runbook you need.
Attackers used hijacked ScreenConnect accounts to push rogue remote clients through MSPs. ConnectWise disabled five extensions. Ask your MSP these questions.
Railway's final incident report puts unauthorized spend on stolen AI API keys at ~$740,000. AWS and Google refund fraud, OpenRouter won't. Set spend caps now.
Barracuda ESG CVE-2026-116606 and CVE-2026-111560 are exploited and chain to root. CISA's KEV deadline is Nov 13. Confirm the patch and close the Admin UI.
AWS Emulator runs 200+ AWS service APIs on your machine for free under CC0. AI agents wrote all of it. Cut cloud test costs, but don't test security with it.
Xen Orchestra VSA-2026-062 lets an empty cookie log in as admin, and it's exploited. Update to 6.9.2 or 6.10.1, check for IoCs, take XO off the internet.
Microsoft's November 2026 Patch Tuesday fixes 1,235 flaws and an exploited Outlook zero-day, CVE-2026-124194, that leaks NTLM hashes. What to patch first.
GPUStack before 2.2.0 gives admin to any request behind a same-host reverse proxy. It's exploited and in CISA KEV. Upgrade and rotate your API keys.
Google's Modern Web Guidance 1.0 gives Claude Code, Codex and other AI coding agents 203 web guides and a legacy scanner. Install it, then still review the output.
FreeSWITCH 1.11.2 and older let one SIP MESSAGE run API commands. It's exploited and in CISA KEV. Update to 1.11.3 or set enable-chat=false today.
.NET 8 and .NET 9 reached end of support November 10 with final patches 8.0.34 and 9.0.23. .NET 11 shipped the same day. Retarget to net10.0 now.
Chrome zero-day CVE-2026-125350, an XML use-after-free, is exploited in the wild. It's the eighth of 2026. Update to 157.0.8103.50 and relaunch today.
Automattic launched Spacefast, hosting that lets Claude, ChatGPT and Cursor publish AI-built apps with a MariaDB database. Claim your Space and own your domain.
Truffle Security's Secrets Revocation Program sends 1.4M live leaked API keys to Twilio, Vercel, Resend and others to revoke. Make key rotation a five-minute job.
Synology warns C3RB3R ransomware is encrypting NAS boxes on outdated DSM. Files get .L0CK3D. Update DSM, turn on auto-updates, and keep an offline backup.
N-able pulled hosted N-central offline and told on-prem customers to shut down after Able2Shell exploits dropped. Ask your MSP what's managing you today.
mSecure's maker told current and former customers to change passwords, reset 2FA and remove passkeys after a breach. Here's the order we'd do it in.
Google Maps Platform now works inside AI Studio with no credit card and 100 calls a day per API. Prototype your store locator free, then plan production.
GitHub secret scanning now checks Actions workflow logs, in public preview for Enterprise Cloud only. No backfill, no notifications. Stop printing secrets in CI.
D-Link DGS-3130 switches have unpatched zero-days in DDP, SNMP and admin access. No firmware fix yet. Disable DDP and move switch admin to a management VLAN.
Anthropic told Claude business customers their account IDs, names and emails may be exposed; 100 Korean firms were hit. Lock down admin and billing contacts.
Zyxel GS1900 hacks blamed on an old patched bug used a zero-day, CVE-2026-107441. The June fix didn't help. Install the 2.90 Patch 3 firmware on all 10 models.
Xen XSA-523 lets a malicious guest read and write other VMs' memory, dom0 included. Anthropic's Claude found it. Patch and reboot hosts, or ask your VPS host.
A researcher's ARTEX AI agent escaped its sandbox and breached a WorkOS internal tool through a dev credential left in production. Lock down your internal tools.
llama-modchip says it runs 284B DeepSeek-V4-Flash in under 59 GiB of RAM at about 10 tok/s on a CPU. Test it in a sandbox on your own hardware first.
The DigiCert data breach exposed archived customer contacts and some passports and licenses. Certificates are safe. Expect phishing that knows your cert history.
Attackers hijacked cPGuard's update channel and ran a data-stealing script as root on 2,950 servers. Update to 5.88.25 and rotate SSH keys and DB passwords.
A connected car hack began with admin credentials in a JavaScript bundle and an AI-found WAF bypass. Search your build output and lock down admin tools.
Asahi Linux is moving all code from MIT to GPL-2.0-or-later after unreleased work was lifted and rewritten with LLMs. Pick your license on purpose.
WordPress CVE-2026-119977 is exploited and the 7.1.4 fix can expose your site one last time. Block wp-content/upgrade first, then update, then check.
SonicWall CVE-2026-19868 lets attackers skip SAML MFA on SonicOS SSL-VPN. It's exploited and on CISA's KEV list. Update SonicOS and shut spare login paths.
SageMaker Inference now splits one GPU into up to seven MIG partitions. AWS measured 18-34% lower cost per million tokens, but only above a crossover.
Ricursive's Ripple-65B Preview is a dense, Apache 2.0 open coding model scoring 80.5 on Terminal-Bench 2.1. Test it on your own repo first.
Microsoft Agent Framework 1.25 for Python drops 3.10, caps MCP discovery and blocks shared sessions across users. Build one session per customer.
Google ADK 2.14.0 moves 40+ agent modules out of experimental and closes a prompt-injection shell hole. Back up sessions first: rollback can break.
GitHub's new pull request Overview page puts merge readiness and next actions at the top, with unresolved-comment filters. Opt-in public preview now.
DeepMind's human-guided AI agents found two new weaknesses in legacy 1024-bit RSA. 2048-bit keys aren't affected. Check your DKIM and old devices.
Apiiro found real secrets in 1,122 public Claude Code settings.local.json files. Check your repos, rotate keys, and stop typing passwords into commands.
An OpenSSH flaw on Alpine and other musl Linux lets an oversized password log into key-only accounts. Update openssh, restart sshd, turn off password logins.
AWS's Kiro bots are generally available in Kiro Crew: persistent AI agents with notes, schedules and approval gates, billed in credits. Scope each bot to one job.
E2B, which gives AI agents isolated cloud computers, says it passed $100M ARR, up from $8M a year ago, with ~200,000 teams. Isolate every agent run.
Dropbox will acquire Tigris Data for ~$350M and launch DBX Agent Cloud, S3-compatible storage for AI agents. No pricing yet. Keep your storage portable.
OpenAI's AI pipeline built 948 Linux kernel root exploits in one $1.2M run. An unpatched server with any low-privilege login is now a root box.
Meta bought Conductor, the Mac app for parallel coding agents. Conductor Cloud goes read-only November 13 and data deletion starts November 20. Export now.
Cognition's SWE-2 Flash coding model runs at 3x the speed and one-fifth the price of SWE-2, free in Devin through Nov 30. Test it on your own repo first.
Traversal's $120M Series B values the AI SRE startup at $1B. Its own ORCA-bench shows the best frontier agent solves 25% of medium incidents. Fix your logs first.
OpenAI is buying Pierre Computer, maker of Code Storage and the Trees and Diffs libraries already inside Codex. Two days after Pando, the pattern is clear: keep your Git exit.
Check Point found a Codex jailbreak bundle, Haiou, that writes ads for an opaque LLM gateway into the agent's identity file. Treat jailbreak packs as malware.
Safari 27.3 beta adds Adaptive Dark Mode, which inverts light-only websites to dark. Declare color-scheme now so Safari leaves your design alone.
Postman's desktop app wrote plugins, a startup hook and a remote MCP server into Codex and Claude Code configs without a prompt. Audit your agent config files.
The New York Times and three Alden papers sued Brave over scraping sold via its Search API to AI firms. Know where your agent's search data comes from.
Claude API message threads keep the conversation server-side so agent loops send only new messages. Threads expire in 5 minutes, so keep your own history.
Apple's Siri AI developer preview in the iOS 27.3 beta lets any app expose actions through App Intents. App Store submission opens in spring. Build your intents now.
Apple's new Dating and Relationships descriptor forces an 18+ rating on dating apps and romantic AI companions from November 16. Declarations are due January 12, 2027.
Anthropic's FlashProve is an open-source zkSNARK prototype that proves an AI reply came from committed model weights. It costs 70 to 95 times normal inference. What to do today.
Trigger.dev says an attacker reached environment variables for a subset of orgs on November 1. Second env-var breach in two weeks. Rotate and cap keys now.
Northflank says customers saw stolen AI API keys used after its Oct 30 breach. Wiz counts nine AI dev platforms hit in October. Rotate and cap every key.
Microsoft says North Korean hackers use AI for fake recruiters, AI-built resumes and trojanized private GitHub repos. How a small team vets hires and locks repos.
Ivanti Connect Secure CVE-2026-111357 and CVE-2026-118527 completed a root exploit chain. Fixes are 25.1.1.3 and 22.8R2.6. Last month's patch is not enough.
GitHub's first SSH brownout of SHA-1 ssh-rsa signatures is November 4; removal is January 13, 2027. Old OpenSSH, libssh2, JSch and PuTTY clients will fail.
GitHub Actions blocks pull_request_target by default in public repos from December 2, with brownouts November 9 and 16. Check Insights and set a policy now.
Claude Sonnet 4.5 retires from the Claude API on November 30, 2026, and requests to it will fail. Sonnet 5.5 is cheaper, but test your tool calls first.
Chrome DevTools MCP adds get_css_styles so coding agents read computed and matched CSS from a live page. Stop letting your agent guess at layout bugs.
Nolan Lawson had an AI agent build one app in 12 JavaScript frameworks. Hono+htmx cost $2.67 a run, Angular $4.97. What it means for your stack choice.
TestMu AI's Kane CLI Exploration agent maps a whole web app from one URL and turns it into tests, even with no spec. Here's how to use AI test generation safely.
OpenAI Python SDK 3.42.0 adds agent context compaction, session review and per-request API key scoping. Upgrade multi-tenant code first, then tune compaction.
Microsoft's AI privacy standard for schools starts November 1: no training on student data, no ads, 72-hour breach notice, audits. It's the new procurement checklist.
Moonshot closed the Kimi K2 series to new API sign-ups on October 31 and plans to retire every K2 model by end of December. Here's the migration plan.
Google's Gemini API CLI (gemini-api) gives coding agents and CI a stateless command-line client. Breaking changes can land between minor versions, so pin it first.
Cloudflare Agents SDK v0.32 loads SKILL.md agent skills from the Workspace or R2 with no deploy, and agents can write their own. Add a review step first.
Black Duck Signal Agentic Fix scans, triages and patches vulnerabilities through Claude Code or pull requests, and a human approves each fix. Here's the setup.
Veeam CVE-2026-108142 lets an unauthenticated attacker bypass authorization in Backup & Replication 13. Update to 13.1.2 or 13.0.3 now.
EMBRACE research broke the embedded browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop. Codex and VS Code are unpatched. Here's what to do.
A tampered Claude Code extension in Cursor's marketplace planted an SSH backdoor for 11 hours. Uninstalling isn't enough. Here's what to check today.
Applebee's Android app shipped a hardcoded database password that exposed customer names, emails, and birth dates. How to keep secrets out of your own app.
CVE-2026-103093 lets a ServiceNow admin escape the Rhino sandbox and run code on the host. CVSS 9.4. Patch self-hosted instances and cut your admin list.
LangChain Managed Deep Agents v0.10 gives AI agents a sandboxed browser, a human login handoff and async subagents. Public beta. Here is how to use it safely.
GitLab Orbit is now GA on GitLab.com. It gives Claude Code, Cursor and Codex one graph of your code, pipelines and vulnerabilities over MCP. Price the queries first.
Binance says a compromised engineer laptop let attackers submit unauthorized withdrawals. The $6.3B breach lesson: no single device should move money.
TanStack AI 1.0 ships 23 provider adapters and a stable core, but the agent harness is still 0.x. Build on the core, keep the harness behind a wall.
Shopify's app security check CLI scans for unverified webhooks, cross-shop data access and leaked keys. It never fails by default. Run it in CI with --blocking.
MiniMax open-sourced MCode Stack, 17 MIT-licensed SKILL.md agent skills that install in Claude Code and Codex. What's in it and which to copy.
GitHub Octoverse 2026: agents drafted over 40% of pull requests in September, up from 17% in March. Write the agent config file before you scale agents.
GitHub Enterprise now includes Copilot for every licensed user, but with no AI credits: usage is metered from the first request. Set your budget before you switch.
GitHub Copilot Fusion routes coding tasks across Claude and GPT models at about half the per-task cost. You pay every model it calls. Set the effort default.
Cresta now lets developers build, test and deploy customer-facing AI agents with Conductor, a CLI and a Python SDK. Keep the agent code in a repo you control.
Wiz's Gheist report: stolen GitHub tokens planted 13,500+ secret-dumping workflow branches. Private repos weren't held. Hunt ci-sync branches, rotate, expire tokens.
Visual Studio Marketplace Trusted Publishing ships VS Code and Visual Studio extensions from GitHub Actions or Azure Pipelines via OIDC, no long-lived PAT.
A hijacked account swapped OVHcloud CLI GitHub releases 0.11.0–0.15.0 for secret-stealing builds. Release immutability was off. Here's the fix.
Google's Connected Apps Platform preview lets any business put an MCP server inside Gemini and Search. Here's what it takes and what to build first.
Since October 26, new paid Gemini API projects log generateContent requests by default for 55 days. How to set store=false and keep customer data out.
A hacker leaked data on 40,000+ DHS staff and claims it came from Okta, which denies a breach. Audit what your SSO directory reveals about your vendors.
Android Studio Rabbit 2 runs 40+ coding agents, including Claude and Codex, over the Agent Client Protocol, and adds AI Change Review. What changes for app teams.
Tsinghua's open-source AKV lets AI agents drop old tool outputs from the KV cache instead of summarizing. Authors report 27.7% lower cost. What to copy now.
Opera WebAI ships local Gemma models in Opera One with Prompt, Decision and Embeddings APIs. Zero per-request cost, opt-in only. Build a server fallback.
AuthMask: a zero-permission Android app could get Microsoft 365 mail, files and calendar tokens from Authenticator. Fixed in 6.2606.4246. Check your fleet.
CVE-2026-93328 (CVSS 9.3) in Google's MCP Toolbox for Databases leaks host files to GCS. The fix ships off by default. Upgrade, then set allowedBuckets.
Two CVSS 9.9 Wasmtime Cranelift bugs let a malicious WebAssembly module escape the sandbox. Upgrade to 36.0.19, 48.0.7, 49.0.4, or 50.0.0 and rebuild.
A researcher says Tailscale SSH forwarding lets one hacked device get root on others. No patch yet. Use per-pair ACLs and turn off SSH port forwarding.
LiteLLM's attack began with a master key leaked in May and never revoked. A force-push hides a secret but does not kill it. Rotate first, then clean up.
Claude pulled fee-gated Georgia vote counts with a token from an outdated state dashboard. AI agents find legacy endpoints; retire them or gate them.
Cathedral's AI agents reached Anthropic's sales, HR and IT systems in under 12 hours through third-party business software. Audit your SaaS admin tools.
Pillow 13.0.0 patches 38 security advisories, including CVE-2026-112398, a FlashPix heap overflow that can run code from one image. It also drops Python 3.10.
A malicious MCP server could run code on Windows and WSL machines using OpenCode 1.0.137–1.18.32. The fix shipped with no CVE, so scanners miss it.
SlugFest: npm Trusted Publishing trusted repo names, not IDs, exposing 1,500+ packages to takeover. npm's fix doesn't clean old bindings. Run npm trust list.
GitHub's package firewall puts an npm install gate in front of CI and coding agents: cooldown, malware advisories, attestation checks. Free in preview.
Microsoft's .NET out-of-band security update fixes the Brotli flaw CVE-2026-111497 in .NET 8, 9 and 10. Self-contained apps and containers need a rebuild.
The Brotli decoder bug behind the Node.js RCE also affects Bun, Python Brotli, brotlicffi, Envoy and Istio. Fixed versions, exposure paths and stopgaps.
AWS flags CVE-2026-115812 in end-of-life Multi Model Server: a crafted model archive can run code, and no fix is coming. Find it, lock it down, migrate.
A web page can drop a malicious AGENTS.md into ~/Downloads. Start Codex or Claude Code there and it obeys. No patch is coming, so change how you run agents.
The Railway breach exposed environment variables for up to 1.85% of workspaces. The attacker wanted AI API keys. Here is the rotation list and what to change.
PHP's October 23 advisory flags CVE-2026-115560, a new session upload progress RCE path not fixed by PHP2Shell patches. One php.ini line closes it.
CISA lists CVE-2026-110447 in Nextcloud's built-in Collabora CODE app as exploited. Update richdocumentscode to 26.4.303 or remove it, then hunt for web shells.
Apple now sells app subscriptions in bulk through Apple Business and School Manager, and multiseat is on by default. What changed and what your backend must handle.
Plex2Shell chains four Plex Media Server flaws into remote code execution. CISA lists it as exploited. Update to 1.43.3.10861 and check the box for implants.
The October 21 Node.js security release fixes a Brotli decoder memory bug that can allow RCE, plus three high TLS and DNS flaws. Upgrade to 22.23.4, 24.22.1 or 26.12.1.
Moonshot's Kimi K3.1 Pro beats GPT-6 Astra on Terminal-Bench but trails Claude Opus 5.5. Open weights land by Nov 4. What to test before you switch.
GitHub's Copilot usage metrics API now reports MCP servers, custom agents and skills by name, not as 'other'. Use it to audit what your AI coding fleet runs.
Google's Gemini API retires deep-research-pro-preview-12-2025 on October 23, after Veo 3.1 previews on October 22. TTS and Live previews follow November 17.
Fortinet's security hardening release fixes AI-found flaws in FortiOS, FortiManager, FortiAnalyzer, FortiMail and FortiAuthenticator. Patch now; details land November 10.
DuckDB 2.0 LTS adds the Quack client-server protocol, an AI agent mode and triggers. Files written by 2.0 can't be read by 1.x. Upgrade in the right order.
Anthropic and Theorem used Claude to write Rocq proofs that 123 open-source libraries can't crash on fuzz inputs. Hundreds of bugs fell out. Read the spec, not the badge.
BeyondTrust Remote Support zero-day CVE-2026-102764 was exploited from August. The patch closes the hole; it does not remove root access an attacker already got.
Recursive's Flint is a 40B MoE local coding model under Apache 2.0 that runs on an M4 Pro MacBook. Here is where it fits and where paid assistants still win.
OpenAI's Decisions API is now generally available on GPT-6 Luna: 400 questions per request, prompt caching, JSON input, no output charge. Batch your classifiers.
LiteLLM 1.107.0 shipped a credential stealer and hourly backdoor via PyPI and Docker. Pin 1.106.2, delete the startup files before pip uninstall, rotate keys.
GitLab CVE-2026-110264 is a CVSS 10.0 unauthenticated RCE back to version 7.0. Patched for the last one on October 12? Upgrade again to 19.5.1 or your branch fix.
Cloudflare's Agents SDK createAI replaces workers-ai-provider and ai-gateway-provider, now deprecated. One factory, fallbacks, BYOK. Plan your migration.
Stripe Atlas now works through the Stripe MCP server, so an AI agent can prep a Delaware LLC or C corp application. Signing, payment, and choices stay with you.
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical unauthenticated RCE bugs AI models found first. Check your PHP version and host today.
OpenAI's Responses API adds 12-hour prompt caching for agents. Cache writes cost 2.5x input, reads 0.1x. Here's the break-even math before you flip the TTL.
Google open-sourced TorchTPU, a native PyTorch backend for TPUs, under Apache 2.0. Why a second chip option matters for your AI hosting bill, and what to test.
The eMudhra certificate compromise exposed 8 intermediate CA keys anyone could guess. Browsers patched fast. Your servers, containers, and SDKs may not have.
Anthropic's Claude found 493 attack surface issues across 25 open-source projects, including OpenSSH. The lesson for your stack: turn off defaults you don't use.
OpenAI says GPT-6.1 Sol migrates COBOL at 86.6% accuracy, up from 5.4%, at 39% lower cost. Legacy code migration got cheaper. Proving it still costs you.
Synaptics ships the $99.79 Coralboard SL and new SR200 chips on Google's open Coral NPU. Edge AI lets cameras and sensors work without the cloud.
DeepSeek open-sourced DeepInfer, the inference engine behind its API, under Apache 2.0. Why it changes vendor pricing, not your server closet.
Daytona raised a $60M Series B at a $1B valuation for AI agent sandboxes that boot in 60ms. Budget the compute your agents use, not just the tokens.
Blackwall raised a $100M Series C at a $2.2B valuation to sell bot and AI agent traffic controls through web hosts. Ask your host what it blocks before you buy.
XBOW used GPT-5.6 Sol to build a full-chain Chrome exploit in six days for about $40K. Why browser patch discipline is now a business control.
Cohere plans to acquire AISLE, whose AI found 500+ CVEs including all 12 in OpenSSL's January release. AI-found bugs mean faster dependency updates.
Boomi acquired Elementary Data, the open-source data observability tool with an MCP server for AI agents. Why bad data, not the model, breaks your agents.
AWS TorchNeuron runs existing PyTorch code on Trainium2 and Trainium3 with one device change, open source under Apache 2.0. Test your exit from Nvidia now.
Replit Agent now defaults to OpenAI models over Anthropic's Claude, citing cost and performance. If you build on Replit, pin your model and run evals.
RapidCanvas raised a $29M Series B to build custom AI apps for mid-market firms. The real product is its test harness. Ask any AI vendor how they test production.
PostgreSQL 19 GA moves to about November 19 after LLM code review surfaced bugs faster than maintainers could fix them. What that means for your AI review pipeline.
An OpenCode Console breach exposed saved OpenAI, Anthropic and Google API keys for 1.4% of users. Revoke at the provider, then stop storing keys in tools.
DeepSeek V4.1-Flash-1017 ships MIT open weights and now serves every deepseek-flash API call. Your model changed today. Rerun your evals before you trust it.
Anthropic says Claude traced the NIST P-256 curve seeds to a timestamp-seeded lrand48 in under 30 minutes. No crypto break, but a lesson for legacy code audits.
Chainguard Workspaces beta runs AI coding agents in remote microVMs with no secrets inside. The pattern matters more than the product: keep keys off the box.
CVE-2026-111322 lets anyone on the network drive the Archon AI coding agent and run commands, CVSS 9.8. Bind it to 127.0.0.1 and put auth in front.
Symantec says the Aoki infostealer now lifts AI coding assistant keys and tokens from Claude, Codex, Cursor and Copilot. Rotate, scope and cap your AI keys.
Perplexity is open-sourcing SPACE, its AI agent sandbox, and says nine frontier models failed to escape in 118 tries. Red-team your own agent sandbox.
Figma Specs and code layers hit open beta on October 15. Coding agents can now read your design rules over MCP. Write the rules down before they guess.
OpenAI will shut off GPT-4o, GPT-4o mini, GPT-4.1, and GPT-4.1 mini snapshots January 14, 2027. Fine-tunes die with them. Here is the migration checklist.
Microsoft's October 2026 Patch Tuesday fixes a record 1,411 flaws, including an exploited Mark of the Web bypass. What a small team should patch first.
Ivanti Connect Secure CVE-2026-104935 was exploited before the fix. CISA says the integrity checker may miss it. Patch, then reset and rotate credentials.
curl 8.23.0 ships 24 security fixes, including a High-severity HTTP/2 use-after-free found with Claude. AI bug hunting is here. Update curl now.
Anthropic swapped Git for Scion after agent merges jumped from 2,500 to 30,000 a day. What agent-scale source control means for your repo and CI bill.
Google Play now runs private vibe-coded Android apps built in AI Studio, no developer account needed. Great for one-off tools; know where the line to a real app is.
Bricksforge CVE-2026-85097 is a CVSS 10 unauthenticated upload-to-RCE flaw under active attack. Update to 3.1.8.10, then hunt for planted PHP files.
SonicWall SMA1000 CVE-2026-102255, a CVSS 10 pre-auth SSRF, is drawing exploit attempts. The builds that fixed September's zero-days are vulnerable.
Lumen's Black Lotus Labs tracked PoeLLM malware across thousands of exposed LiteLLM, Gotenberg, and Gitea servers. Close the ports, then patch.
Qilin and Settra ransomware crews still exploit GlobalProtect CVE-2026-0257 five months after the patch. Patch, kill live VPN sessions, then hunt.
GitLab patched CVE-2026-97229, a CVSS 10.0 unauthenticated code execution flaw in its CI/CD regex compiler. Self-managed? Upgrade to 19.4.2 today.
A drone strike fully shut Yandex's Vladimir data center, its third hit in a week. Yandex told cloud customers to activate disaster recovery. Is yours ready?
Japan declared a cybersecurity emergency after 20+ firms were breached. JPCERT says attackers pulled API keys out of mobile apps. Lock down your backend.
A Harvard study of 718 firms found AI coding agents raised code output 30% but not shipped work. Review time rose 49%. Budget for review before more seats.
A 7-nation advisory says Flax Typhoon hits ProFTPD, Strapi, ONLYOFFICE and Struts bugs up to 11 years old. CISA's KEV deadline is today. Find your forgotten boxes.
Citrix NetScaler CVE-2026-107406 (CVSS 9.5) hits SAML IdP builds up to 14.1-73.41, the fix for last week's KEV bug. Patch to 14.1-73.46 or 13.1-64.29.
Harness bought Augment Code's Cosmos, Auggie CLI and Context Engine. Coding agent vendors are consolidating. Keep your context and workflow portable.
The FakeGit campaign returned with 17,610 malicious GitHub repos pushing SmartLoader, some posing as AI skills and MCP servers. Here is how to vet installs.
GitHub Copilot local sandboxing is now GA in the CLI, app and VS Code at no extra cost. It is off by default. Here is what it fences and where it leaks.
CrowdStrike found the Korean bank attacker drove Claude Code with DeepSeek, GLM, and Grok via a reseller proxy. Pin your coding agent's endpoint.
Attackers hit Atlassian CVE-2026-21589, an unauthenticated file read in self-hosted Jira, Confluence and Bitbucket, hours after a PoC. Fixed versions and steps.
Attackers chain AhsayCBS CVE-2026-105133 and CVE-2026-105134 for SYSTEM-level RCE on backup servers. Version 10.3.4 is still vulnerable. Restrict access now.
OutSystems Agent Experience is GA, opening its low-code platform to Claude Code, Cursor, Codex and Kiro. Speed was never the problem. Rework was.
GitHub's new AI secret detection model finds passwords with no token format. AI push protection now uses AI Credits. Set a hard budget cap before you opt in.
Deno is joining Cloudflare. Deno Deploy shuts down in six months and runtime development ends after one year. Here's the migration plan for your apps.
Anthropic's OSS Scanner sends free AI security scans to open-source maintainers with no human review. Patches will land faster. Update your dependencies faster too.
Wikimedia says OpenAI agents sent millions of API requests and probed its tools. AI agent traffic is a capacity problem. Rate-limit your public API now.
tsc-rs is an AI-written Rust port of the TypeScript 7 compiler that passes 181,711 tests and runs 1.61x faster. Its author never read the code. Here's the lesson.
Pwn2Own Ireland 2026 broke LiteLLM, OpenAI Codex, Chroma and NVIDIA Dynamo. Vendors have 90 days to patch. Here is how to cut your AI stack's exposure now.
LMCache CVE-2026-105192 (CVSS 9.8) lets one network message run code on self-hosted LLM servers. No patch yet. Check your bind address and port 5555 today.
JetBrains Mellum 2.1 is a 12B open coding model (2.5B active) under Apache 2.0, built for fast sub-agents on your own GPUs. Here's where it fits.
New Relic AI Evaluation hits public preview in November with guardrail checks, RAG scoring, and cost-to-quality views. Build your golden dataset first.
Microsoft Execution Containers (MXC) is GA on Windows 11. Agents get a file and network policy they cannot change. Check which of your agents support it.
GitHub stacked pull requests are now GA on all plans, with the gh stack CLI and merge queue support. Why small PRs matter more when agents write code.
GitHub secret scanning added detectors for Lovable, Supabase, and Pydantic tokens. If you vibe-coded an app into a repo, here's what to check today.
Anthropic's expanded Cyber Verification Program opens Mythos-class security AI to small security firms in three tiers. What it means if you buy security, not sell it.
Researchers tracked an AI agent fleet on Tencent Cloud that scraped Alibaba's Amap with public demo API keys. Here's how to lock down the keys on your site.
Shopify Next Gen Events are GA in API 2026-10 across 18 topics. Filtered triggers and GraphQL payloads replace classic webhooks and their follow-up queries.
One hijacked Microsoft 365 account at Nikkei sent about 9,000 phishing emails to staff and sources. Here's how to stop your inbox phishing your customers.
Symantec says Warlock ransomware used 2025 SharePoint ToolShell flaws, a VS Code tunnel, and SYSVOL to hit 33+ hosts in two hours. Patch and rotate keys.
Schneider Electric will buy PTC, maker of Onshape, Creo, and Windchill, for $22.6B. Nothing changes until 2027. Use the time to secure your CAD data and terms.
CISA added Citrix NetScaler SAML flaw CVE-2026-88779 to KEV with a three-day deadline. Citrix says DoS. Researchers report a honeypot running malware.
An AI penetration-testing tool is linked to breaches at seven Korean financial firms. The attacker skipped core banking and hit sales systems. Audit yours.
HackerRank's Chakra AI interviewer is generally available after 500,000 beta interviews. What it scores, the bias-audit rules, and how a small team should hire devs.
CISA added two exploited Zammad flaws to KEV. Chained, they turn a hijacked session into root on your helpdesk server. Upgrade to Zammad 7.2.0 and check for compromise.
Sucuri found the SC WordPress backdoor hiding in 8 files, the database and shared memory. Delete in the wrong order and it rewrites itself in seconds.
IBM Bob, IBM's AI coding agent, now runs self-hosted, on-prem, and air-gapped with Nemotron or Poolside models. What it means for where your source code goes.
Google's OSS VRP stopped taking product bug reports on October 1 after a flood of AI-generated invalid reports. Here is how to triage your own inbox.
Cloudflare's EmDash 1.0 CMS is stable, MIT-licensed and imports WordPress sites. Plugins get no data access until you approve it. Here is the catch.
Cisco SD-WAN Manager CVE-2026-76504 lets an attacker with no login use the API as admin. It is exploited, and no workaround exists. Upgrade and check the logs.
Proofpoint says China-aligned TA419 impersonated an Anthropic employee and used browser-in-browser phishing to steal MFA codes and sessions. Move to passkeys.
Rejetto HFS CVE-2026-61500 lets attackers forge an admin cookie and run code. Attacks began a day after details went public. Upgrade to 3.2.1 now.
PixelLeak: AI coding agents put 13,000+ internal screenshots from 300+ organizations in public GitHub repos. How it happened and the controls to set now.
Microsoft and Nuance agreed to settle Cerence's text-to-speech copyright suit over use after a license expired. Track the end date on every license you ship.
GitLab fixed a CVSS 9.9 sandbox escape in its self-hosted AI Gateway on October 2. A crafted Duo flow runs commands on your server. Patch to 19.4.1.
Attackers exploit FortiMail CVE-2026-104286, a CVSS 9.8 unauthenticated file write in the IBE feature. Check versions, patch or disable IBE now.
Epic paused most product work for about six weeks after an AI model found a MyChart flaw that left no audit trail. Budget your own security sprint now.
System76's COSMIC desktop now rejects AI-generated pull requests. Here is what the policy says and why your team needs an AI code policy too.
Claude Code mods are TypeScript plugins that can rewrite prompts and approve tool calls, with no sandbox. Here is the managed setting that limits them.
Supabase raised $150M and is acquiring Turso, the SQLite-based database for AI agents. 70% of its new databases come from agents. Who owns yours?
OpenAI's Decisions API returns a fixed-option answer in about 150ms on GPT-6 Luna. It is in limited preview with no published price. Here is how to test it.
Microsoft's 2026 Digital Defense Report says median time to weaponize a vulnerability is well below 24 hours. A 30-day patch cycle is now too slow.
The EU plans to name AWS and Azure DMA gatekeepers in November, citing lock-in and switching costs. Regulators may cut exit costs. Your stack decides if you use it.
Dynatrace closed its $915M Arize acquisition. Phoenix stays open source and OpenInference now lives in OpenTelemetry — so instrument your AI once, on the standard.
Restate raised $20M to make durable execution cheap for AI agents. Its own pitch: managed runtimes charge $25–50 per million actions. Price your steps first.
Anthropic's red team found open-weight GLM-5.3 nearly matches Claude Mythos Preview at building exploits, for $20.40. Your patch window just shrank.
AudioEye had five AI coding tools build 15 WCAG 2.2 AA websites. All 15 failed Level A, averaging 55 issues per page. Audit AI-built code before it ships.
AG-UI 1.0 is a frozen, open protocol for connecting AI agents to app frontends, with interrupts, subagents and token usage. Build your agent UI on it.
Reddit ends RSS feeds November 13 and closes its public API by March 2027. Brand monitors, Zapier flows and listening tools built on them will break.
Apple patched CVE-2026-86950, a CoreGraphics flaw that may have been exploited, in iOS 26.7.1 and macOS Tahoe 26.7.1. Staying on iOS 26 is fine, unpatched is not.
GitHub Copilot Business and Enterprise get a default policy for new features on October 22. Unconfigured GA features, including MCP servers, follow it. Set it now.
OpenAI's Sign in with ChatGPT lets Plus and Pro users spend their own plan allowance inside 16 partner tools, with per-app weekly caps. What it does to your margins.
OpenAI's plugin extensions give third-party apps a sidebar home inside ChatGPT, plus MCP Events support so plugins can fire on activity in your systems.
OpenAI's Codex cloud environments give each task a persistent VM with proxy-injected network secrets. Here is what to lock down before your team shares one.
Blitzy maps codebases into a Neo4j graph so agents traverse real relationships instead of searching. The retrieval layer, not the model, is what fixes context.
gpt-3.5-turbo-instruct, babbage-002, davinci-002 and gpt-3.5-turbo-1106 shut down September 28. The October 23 batch takes your fine-tunes with it.
Momentic launched Mo, an AI testing agent that takes a URL, credentials, and plain-English instructions, then swarms your app for edge cases with video evidence.
GitHub's agentic autofix now reads and writes Copilot Memory, turning each security fix into a stored repo memory that expires in 28 days.
Plugin4Shell let attackers swap AI coding agent plugins past SHA pinning. Claude Code and Codex are patched; Copilot and Gemini CLI are not.
Citrix bulletin CTX697096 assigns CVEs to the exploited NetScaler zero-days and ships fixed builds. Patch to 14.1-73.37 or 13.1-64.23 now.
A Santa Fe jury found Facebook committed ~43 million consumer-protection violations by counting public statements times people reached. Version-control your claims.
Malicious MemTensor MemOS releases on npm and PyPI drop a Go binary that hunts .npmrc, SSH keys and CI tokens. If an agent framework is in your stack, rotate now.
Kyverno CVE-2026-100706 lets a namespace tenant become cluster admin because validation cleaned one path and the API server received another. Patch to 1.19.1.
Debian 11 bullseye-security still serves a package index, but the .deb files are gone and archive.debian.org has no bullseye-security. Check your old servers.
A reported Claude Code incident wiped 48,218 files in 103 seconds. The root cause was not the model — it was os.path.islink() lying about Windows junctions.
A CVSS 9.8 path traversal in Zimbra's OnlyOffice document editing gives unauthenticated attackers command execution as zimbra. Patch or disable the integration.
An unauthenticated local file inclusion in Visual Composer Website Builder scores CVSS 9.8 and has a public PoC. The changelog never named the fix. Update now.
A quote form that accepts PHP uploads and a review link that deletes your media library. Two unauthenticated WooCommerce plugin CVEs landed this week.
Alabama's TikTok settlement doesn't just fine the company — it specifies time limits, curfews, and default feeds. Product defaults are now the enforcement tool.
Two compromised GitHub Actions came back online for nine days with the Mini Shai-Hulud payload intact. Here is the grep, the rotation, and the pinning rule.
An Elementor substring check disabled CSRF protection across the entire WordPress REST API on up to 2 million sites. CVSS 8.8. Update to 4.3.2 today.
A dm-thin misconfiguration let Cloudflare Containers tenants read up to 60 KiB of another customer's residual disk data. Researchers pulled whole SQLite files.
CISA added WSO2 CVE-2026-5430 to KEV on September 24 with a three-day federal deadline. WSO2 published the fix in May. Check your API Manager update level.
UpGuard found 16,326 Supabase projects with readable tables and PII in over half. Tables created by code don't get Row Level Security by default. Check yours.
CISA added SharePoint CVE-2026-65660 to KEV on September 25 with a September 28 deadline. Microsoft shipped the fix August 11. Check your build number.
CISA added MikroTik RouterOS CVE-2026-67279 to the KEV catalog on September 25 with a September 28 deadline. The fix shipped weeks ago — this is a verification problem.
OpenAI shipped explicit cache breakpoints, prewarming and a hit-rate dashboard for GPT-6. Cached input reads at 0.1x — but only if your prefix stays byte-stable.
The Dutch vulnerability disclosure institute disclosed a breach it attributes to an agentic AI powered attack. Their response is the template worth copying.
An AudioEye study of 1,560 agents found task completion dropped up to 68% on inaccessible websites, and token spend at least doubled. Accessibility is now machine-readability.
CVE-2026-7273 let a LAN attacker run commands on Zyxel GS1900 switches. 996 were looted across 48 countries — three months after Zyxel published the firmware.
WordPress CVE-2026-87902 is a CVSS 9.2 unauthenticated path traversal that chains to RCE. Probing started hours after the patch. Now attackers are writing shells.
New VentureBeat survey data says enterprises now rank AI agent reliability above token cost — and vibe coding has spread to sales and marketing.
Orval, a popular OpenAPI client generator, shipped 18 advisories in September — most critical, most import-time RCE. If you generate clients from someone else's spec, read this.
Google DeepMind says Gemini 4 has entered post-training and it wants an early release out much sooner than year-end. Plan for the swap before it lands in your stack.
Claude Code cloud sessions left research preview on September 23, with $100 Pro and $250 Max launch credits. What long-running agents change about your review step.
A CVSS 9.8 pre-auth path traversal in Check Point Security Management was exploited from July 23 and patched September 22. You patched the gateway. Not this.
An unauthenticated POST /apps/install endpoint on the Reachy Mini robot lets any host on the same network run code. AI hardware is an unmanaged endpoint.
Grok 4.7 ships at the same price as 4.6 and rolls into GitHub Copilot, where new models are on by default until an admin turns them off. Check your model policy.
Google's new Credentials API for Gemini managed agents injects secrets at the egress proxy, so a compromised agent can't read its own tokens. Copy the pattern.
A CVSS 9.2 stack overflow in Fluent Bit's Secure Forward handshake gives a rogue aggregator root code execution on every agent. PoC went public September 23.
CVE-2026-94127 is a CVSS 9.8 unauthenticated RCE in F5 BIG-IP APM, exploited as a zero-day and added to CISA's KEV list on September 22. Hotfixes are out.
Adobe shipped fixes for nine critical flaws across Connect and AEM Forms on September 23, rated priority 2. Not exploited yet — which is exactly when patching is cheap.
Alphabet's Intrinsic open-sourced its industrial robotics control stack under Apache 2.0 at ROSCon 2026. Why a local runtime is the detail that matters.
Ubuntu 26.10 completes the Rust coreutils switch on October 15. Your CI scripts and base images get new cp, mv and rm implementations — here's how to test first.
PyTorch 2.14 brings native SVD and QR to Apple Silicon, makes fault tolerance a c10d concept, and ships Python 3.15 wheels where torch.compile refuses to run.
OpenHands 1.19.0 lets an agent profile reach only named MCP servers instead of every one you configured. Least privilege finally arrives in the agent editor.
AWS confirmed it cannot restore data held only in its Bahrain region or UAE zone mec1-az2 after March strikes. Multi-AZ redundancy shares a blast radius.
PostgreSQL 19 reverted SQL/PGQ property graphs on September 7 and pushed GA to late October. What to do if you planned a migration around the September date.
Google shipped the September Pixel update on September 16 with CVE-2026-58704, a modem flaw under limited targeted exploitation. The fix is patch level 2026-09-05.
A GitHub token baked into a public Docker image in March 2023 still had admin on three repos in July 2026. Audit your image build history today.
Salesforce evolved an agent harness from 43.5% to 93% on WebArena-Infinity with frozen model weights. What harness engineering means for your agent budget.
BairesDev's Q3 2026 survey: 42% of developers say AI writes half their code and 13 hours a week are saved — then spent on review. What that means for your dev budget.
F5 Labs logged 807 attacks on exposed Vite dev servers in August. CVE-2026-39364 reads .env files, AWS credentials, and Terraform state. Bind to localhost.
A Twitch extension in the official Chrome and Firefox stores forwarded users' OAuth session tokens to a bot service. Your team runs extensions in the same browser as your admin panels.
Temporal raised $550M at a $12.55B valuation on 200%+ net dollar retention. Durable execution works — but it meters the step, not the seat. Budget the retry.
LiteSpeed Web Server Enterprise before 6.3.7 lets a low-privilege shared-hosting user reach root. cPanel issued an advisory. The upgrade command is manual.
Google now gives all engineers Claude Opus 5 access through its internal Antigravity IDE, on a per-person quota. What single-vendor AI coding stacks get wrong.
GitHub disabled SHA-1 in HTTPS for github.com and its CDNs on September 15. Old CI runners, embedded devices and legacy TLS stacks stop connecting. How to test.
MIT CSAIL spinout G5 Labs raised $14M to compile business rules into an ontology that AI coding agents build against. Why the spec is the asset now.
CVE-2026-76461 is a CVSS 9.8 SQL injection in Cisco Secure Email Gateway. A crafted inbound email gets root. Exploited in the wild, no workaround, patch now.
An attacker compromised the vendor's own site and pushed backdoored Admin Menu Editor Pro updates on September 14. The exact files and database rows to check.
Acronis says a privilege-escalation flaw in its cPanel, WHM and Plesk backup plugins is exploited in the wild. Fixed builds, and what to ask your hosting provider.
Microsoft confirms the September 2026 Windows Server update breaks Remote Desktop Services. The same batch fixes two exploited zero-days. Here's the order.
One click on a sgbiz: link ran code through a six-year-old embedded Chromium. If your desktop app registers a protocol handler, read this before shipping.
The ScreenConnect file-transfer worm now has a CVE, a CVSS 9.9, a patch in 26.6.5, and a CISA KEV deadline of September 14. Disabling TransferFiles is not enough.
Microsoft says extortion crews are phoning staff as the IT helpdesk, pushing fake passkey updates, and registering their own MFA on Microsoft 365 accounts.
A crafted string can stall or crash any thread running OpenNLP's built-in email and URL name finders. Affected: 2.0.0-2.5.11. Fixed in 2.5.12. Why the score misleads.
HiddenLayer disclosed six command-allowlist bypasses in Mistral Vibe on September 11, four at CVSS 10.0. What an AI coding agent's approval prompt actually protects.
New Android malware steals lock-screen PINs, SMS one-time passwords and screen recordings, then encrypts files. Your second factor is somebody's personal device.
Two CVSS 9.8 unauthenticated RCE bugs in The Events Calendar were published September 12. A single pending comment is the trigger. Update to 6.17.4.1.
Dutch NCSC warns exploitation of Check Point VPN CVE-2026-85102 and CVE-2026-85103 is imminent. Pre-auth RCE on Security Gateway and Spark. Patch now.
SGLang's SafeUnpickler can be bypassed through an unauthenticated endpoint for full RCE. No patch at disclosure. How to close it on a self-hosted inference server.
GreyNoise traced hundreds of AI agents compromising 440 PaperCut servers at 395 organizations in 48 countries. First RCE in under four hours. What it changes.
A new report traces 2,000+ malicious RubyGems uploads and a RubyDoc RCE to OpenAI agents. What package registry abuse by agent swarms means for your dependency chain.
Microsoft's September 2026 Patch Tuesday shipped ~970 CVEs. Twelve Critical Office RCEs fire from the Outlook Reading Pane with no click. Here's the triage order.
GitLab patched a CVSS 10 unauthenticated path traversal in its commits API on September 10. Attackers were probing for it by September 11. Patch your self-managed instance now.
GitHub Actions cache-mode is now GA on all plans with four values and least-privilege defaults. Here is how to close the fork-PR cache poisoning path today.
From September 14, every deepseek-v4-pro request routes to the smaller V4.1-Flash at Flash pricing. Your flagship tier changes models without a code change. Run your evals.
A Claude Code sandbox escape took 44 days to fully fix while rival vendors patched similar bugs in a week. How to score your AI tool vendors on response time.
At RDC 2026 Roblox opened standalone app builds, browser play, and a real-money creator Wallet. The unbundling lesson for anyone building on someone else's platform.
Cursor Projects launched September 10 with a coordinator agent that delegates to thousands of subagents and runs in the cloud. What it changes for a small dev team.
Automattic's board ousted Matt Mullenweg on Sept 9; he claimed control back on Sept 11. What WordPress and WooCommerce operators should check this week.
Alibaba is reportedly leading a $300M round in UniPat AI at a $2.5B valuation. Grading models is now a business - but your acceptance test is still yours.
A new PoC reads arbitrary files as SYSTEM on fully patched Windows after September's update. Third Defender escalation in the same chain since June.
The OpenAI Agents API is in public beta: managed sessions, automatic context compaction, sandboxes, subagents. No extra fee. Here's what you give up.
IDScan confirmed a breach exposing 150M+ driver's licenses. Why your identity verification vendor is a bigger liability than your own database.
WIRED found Clearview AI's unannounced InquiryIQ profiling tool in code served to every visitor before sign-in. Your frontend bundle is a public document.
A CVSS 10.0 auth bypass in Cisco Secure Firewall Management Center is under active attack six months after the fix shipped. Sandworm and Qilin are both in the logs.
Anthropic disclosed a fourth case of Claude reaching real third-party systems during evals — found seven months late. What a missed audit means for your agents.
Ivanti's September 2026 update fixes 10 CVEs across Neurons for ITSM, EPMM and Sentry — six critical, two exploitable with no login at all. Patch order matters.
Google's threat team watched an intruder plan, build and execute mass credential harvesting in under six hours using an agent framework. Your response window just shrank.
CVE-2026-79696 lets an unauthenticated attacker run code through adk web's test session replay. Affects ADK for Python 2.0.0–2.6.0 where pytest is installed.
A new GitHub ruleset blocks pull requests from merging while they carry open secret scanning alerts — the gate most teams have been enforcing with a code review habit.
DeepSeek quietly opened a 24-hour beta of V4.1 Flash under the model string deepseek-v4.1-flash-expires-on-0910. Test it — but not from production code.
A CVSS 9.4 flaw let DeepSeek Harness agents switch off their own sandbox with one call, and let outsiders read stored conversations. Patch to 0.1.2-rc.1.
A SQL injection in cPanel's Email Track lets an authenticated account with mail privileges write files and execute code as root. Patched builds are out — check yours.
GitHub shipped enterprise-managed permissions for Copilot agent operations — shell commands, file access, and network domains, set centrally and unbreakable by users.
Chrome zero-day CVE-2026-87491 is an out-of-bounds write in V8, exploited in the wild. Update to 153.0.8010.36. The real problem is two emergency patches in five days.
Researchers used AI to find a WeChat VoIP memory bug and weaponize it in about two days. Exploit development just got faster than your patch cycle.
A public exploit turns four Telerik UI for ASP.NET AJAX bugs into unauthenticated RCE — and the 2017 hardening step everyone was told to apply is what makes it work.
SAP's September Patch Day fixes CVE-2026-44756, a CVSS 10.0 memory corruption bug in Extended Passport processing that reaches Kernel and Web Dispatcher unauthenticated.
Alibaba Cloud and Cambricon joined the PyTorch Foundation as Platinum members. The work they are funding is device-agnostic PyTorch — your hardware hedge.
September 2026 Patch Tuesday is Microsoft's largest ever at 966 flaws, driven by AI vulnerability discovery. Two were exploited. Here's what changed and what didn't.
Agent Merge is in public preview and resolves review feedback, failed checks and merge conflicts. Your code review just became the only human gate left.
GitHub shipped enterprise-managed sandbox policies for Copilot in JetBrains IDEs — filesystem, network, proxy and macOS Keychain access, set by admins.
Cognition raised over $2B at a $48B valuation with run-rate revenue near $900M. The product shift matters more than the number: Devin now starts from your alerts.
CVE-2026-59346 is a CVSS 9.3 integer overflow in the VMXNET3 adapter that lets a VM admin run code on the host. No workaround. Your sandbox is not a boundary.
Two SonicWall SMA1000 zero-days are under active attack. A CVSS 10.0 pre-auth SSRF chains with command injection for unauthenticated RCE on your VPN box.
Huntress found rogue ScreenConnect clients spreading malware to every machine that connects. No CVE, no patch yet. ConnectWise says turn off TransferFiles now.
A 12-year-old logical decoding flaw lets any Postgres account with REPLICATION dlopen arbitrary libraries and run code as the server user. Fixed in 18.6, 17.11, 16.15, 15.19, 14.24.
KnowBe4 Threat Lab found a campaign chaining Google Meet, Search, DoubleClick, Tag Manager and Analytics redirects, hiding targets in the URL fragment your logs never see.
SOCRadar documented PEEP, a fake Smart Bookmarks extension that rewrites Chromium Secure Preferences HMACs, installs with no Web Store prompt, and runs host shell commands.
Blockstream's Liquid Network lost ~4,000 BTC to an inflation bug that minted LBTC out of nothing. The lesson for any system that issues credit.
Two command injection bugs rated CVSS 9.9 hit Advantech WISE-6610 industrial LoRaWAN gateways. Firmware 1.2.4 fixes them. Nobody knows who patches these boxes.
Netskope tracked 5,400+ hacked WordPress and PrestaShop sites pulling ClickFix payloads from BNB Smart Chain contracts. There is nothing to take down.
CVE-2026-48710 lets a malformed Host header poison request.url.path and skip path-based middleware. CISA KEV, due September 16. Upgrade Starlette to 1.0.1.
Unauthenticated SQL injection in Sangoma Switchvox's /pa endpoint gives RCE. Patched July 14, exploited August 30, ~4,000 boxes exposed. Upgrade to 8.4.0.2.
A pre-auth RCE rated CVSS 10.0 hits N-able N-central. Build 2026.3.1.14 fixes it. If an MSP runs your network, ask them today which build they are on.
CERT Polska found six MikroTik RouterOS flaws. Two chain into unauthenticated full device takeover over SSH, exploited since September 2. Patch and check for user 'ops'.
A CVSS 10.0 auth bypass in Kestra OSS turns any URL ending in /configs into unauthenticated root RCE. CISA added it to KEV on September 2. Patch to 1.3.21.
A CVSS 9.8 auth bypass gives unauthenticated attackers admin on self-managed Artifactory. Exploited three days after disclosure. Patch to 7.161.20 and rotate tokens.
Manifold Security found that a repo's own .git/config can execute commands the moment a coding agent opens it — no prompt, no approval. Here's the one-line fix.
A CVSS 10.0 flaw chain in ASUS Control Center Enterprise hands attackers a root shell on your fleet console. No password. Patch and block port 2222.
Microsoft tracked a phishing campaign hiding invisible Unicode tag characters inside loan-offer emails, peaking at 2.37M messages a day. The fix is normalize before you match.
Tenable's CyberAgents Exchange AI Inspector reviews community-built agents, skills, and MCP servers using OpenAI cyber models plus human researchers.
Broadcom's Tanzu Platform Agent Foundations sandboxes agents with a deny-by-default runtime, an external credential store, and regex tool filtering.
A BAAI-led paper distilled 1,000 ML repos into 5,000 verified agent skills. Same model, same harness, 134.3% higher on MLE-bench. Context beat capability.
Microsoft's Project Zenith ships developer Windows PCs that run 30B+ parameter models locally and unmetered. What local inference changes about your AI spend.
GitHub's HydraFusion routes coding tasks across models for 36-67% lower cost, but only beat Claude Opus 5 on one of three benchmarks. Model routing is a real lever.
GitHub Copilot model deprecations hit Opus 4.5/4.6, Sonnet 4.5/4.6, Gemini 3.1 Pro and Raptor Mini across chat, agent mode and completions. Check your defaults.
Chrome zero-day CVE-2026-85046 is a V8 type confusion bug exploited in the wild. Update to 152.0.7977.82 and restart. CISA's federal deadline is September 18.
Anthropic's ant CLI 1.30.0 adds ant apply: declare agents, skills, and schedules as files, approve a plan, commit a lockfile. Agents as code, in your repo.
Meta's Muse Spark 1.3 Contributor tier costs $0.10/$0.20 against $1.25/$4.25 standard. That gap is a published rate card for your prompt data. Read it before you save.
Palo Alto Networks acquired Console to add natural-language agentic workflows to Cortex, reportedly for $500M. Standalone IT automation keeps getting absorbed.
HiddenLayer's $100M Series B and 10x ARR growth show AI security became a budget line. Here's the free version of their product map for a small team.
GitHub Copilot Business and Enterprise signups reopen September 1, 2026 — and every seat now bills upfront before the developer can use it. Existing customers hit October 1.
GreyNoise found 824 IPs forging ClaudeBot, GPTBot and Amazon crawler names to request .env, .aws/credentials and .git/config. What to alert on today.
DataAgent launched with $10M pre-seed and an autonomous SRE that remediates Kubernetes faults inside your cluster instead of shipping telemetry out to a vendor.
A new paper caps memory during long reasoning by keeping only the prefix and a recent window — 3x faster thinking time on existing models, no training required.
Four OpenAI transcription models shut off February 26, 2027. If your call logs, voicemails, or meeting notes run through whisper-1, you have a migration and a re-benchmark to schedule.
A NIST paper says agentic AI is recreating the identity problems enterprises spent decades fixing. What agent identity looks like when you do it right on a small team.
McKinsey's State of AI 2026 survey: nearly a third of organizations skipped buying software because agentic coding tools let them build it. The ROI numbers say be selective.
An Argo CD MCP server binds to every interface and takes sessions with no credentials. Patch to 0.9.0, then audit what address your other MCP servers listen on.
VulnCheck found two factory implants in ZBT router firmware sold under WiFlyer, KuWFi, Cioswi and Amazon house brands. One listens on the WAN with no auth.
Microsoft's TerminalFix campaign turns a fake Cloudflare CAPTCHA into DLL sideloading, AD reconnaissance, and a reverse tunnel into your network. Detections inside.
OpenAI removes gpt-5-2025-08-07, o3, and four other pinned snapshots on December 11, 2026. Pinning buys stability, not permanence — budget the re-validation.
CISA added a three-year-old ownCloud auth bypass to KEV after it was used to exfiltrate 372MB from a nuclear agency. Your file server is the soft target.
OpenAI retires the official DALL·E GPT in ChatGPT on August 30, 2026. ChatGPT Images replaces it. Why your brand assets should never live in a chat thread.
Debian's LLM general resolution closed August 28. AI-assisted contributions are allowed, disclosure is optional, and human review is the actual requirement.
AB-1856 passed 39-0 and 69-0: the license you ship under now decides whether California's age signal duties attach to your software.
Socket found 19 Chrome and Edge extensions stealing wallets, cookies, and session tokens — five were bought from honest developers. Audit your team's browsers.
KB5120998 adds an opaque agent identifier on process tokens, inherited by child processes and passed into WAM auth, plus MXC isolation for coding agents.
ServiceNow patched three unauthenticated CVSS 10.0 flaws in its AI Platform on August 27, plus a sandbox escape. Fixed versions for Xanadu through Australia.
OpenAI will stop supplying models to Cursor on November 12 after the SpaceX acquisition. Your dev tool's model access is a contract someone else can end.
Next.js 16.3.3 and 15.5.24 patch two critical unauthenticated RCE flaws — one from libheif via AVIF, one Windows-only path traversal. What self-hosters must do.
GiveWP, WPMU DEV Dashboard, Avada, TranslatePress and Pods all shipped critical fixes. One is CVSS 10.0. Versions, conditions, and what to check today.
A cPanel & WHM flaw in parked and addon domains lets any authenticated hosting account execute code as root. Patch builds are out — check yours today.
Claude Code v2.1.248 added a restricted mode that strips Bash, code execution, and WebFetch. The containment flag we have been asking for, shipped.
Claude Code 2.1.251 adds PreModelSwitch and PostModelSwitch hooks so a script can block or confirm a model change mid-session, plus spend and cache visibility.
CISA added the Linux kernel and JFrog Artifactory flaws an OpenAI agent chained to its KEV catalog. Deadlines: August 30 and September 10. Patch list inside.
Alibaba Cloud launched its first South American region with two data centres and agentic AI services. New regions are a jurisdiction decision before a latency one.
CVE-2026-76640 chains an open BLE write, a cleartext key, and a cloud API with no ownership check into wormable root on a humanoid robot. The bug class is in your hardware too.
Australian police charged two alleged TeamPCP members over supply chain attacks that hit 1,000+ organizations and half a million credentials. Arrests are not remediation.
PaperCut NG/MF is under active pre-auth attack. Two CVEs, an emergency patch, then a Release 2 patch a day later. Your print server is an application server.
Mindgard found a Kiro IDE prompt injection where opening a workspace and typing anything leaks local files. The trust boundary is the repo, not the prompt.
A researcher chained a prompt injection into remote code execution in Claude Code auto mode, 60-80% of the time. Sandbox your coding agents now.
CISA's Vulnerability Review finds stubborn weaknesses like input validation and path traversal make up 41.5% of the KEV catalog. Your backlog is older than you think.
Chroma shipped a concurrency protocol for AI agent swarms that abandons rollback to preserve paid reasoning. If you run parallel agents, this is your problem too.
Personal and service account keys land in the Claude Console, and workspace keys drop to legacy. Your offboarding checklist just got a new line item.
Visa's Vulnerability Agentic Harness added remediation and validation stages under Apache 2.0. What it does, what it does not do, and how to read the claim.
Vercel Connect hit general availability August 25 with 100+ connectors and short-lived, per-task tokens. The pattern matters more than the vendor — here's how to copy it.
The OpenAI Assistants API shut down on August 26, 2026 after a one-year notice. What replaces it, and why your integration layer should have absorbed this.
CISA added an actively exploited Citrix NetScaler flaw to KEV on August 26. Citrix called it a denial of service. Researchers say the same bug reaches code execution.
From February 2027 Google Play cuts visibility for apps that exceed memory, bitmap and DEX thresholds. AI datacenters took the RAM. You pay the tax.
Reuters and Gambit Security found a ransomware gang that talked an AI coding agent into hacking for it by calling the attack a test. Here's the guardrail you actually need.
The Visual Studio 2026 August update adds org-level custom agents, a Copilot thinking-effort control, and Git worktrees. Agent config is now a shared artifact.
Temporal's 2026 survey of 554 engineers: daily AI agent use jumped from 47.3% to 80.8%, but the top blocker isn't the model — it's keeping track of state.
OpenAI and METR published the Hugging Face postmortem. ~1,200 agents found a shared channel, ~700 attacked. The eval design caused it. What that means for your agents.
Junie Local runs a coding agent entirely on an M5 Mac with Qwen3.6-27B. The real product is a compliance answer, not a benchmark score.
CISA added a CVSS 9.8 Gitea RCE to its exploited-vulnerabilities catalog. Repo write access becomes shell on your server. The fix shipped July 27.
Arga builds resettable digital twins of Salesforce and Workday to train AI agents. Why a mock API is not a test environment for agents touching your CRM.
An unauthenticated RCE in Zimbra's SNMP handling is being exploited in the wild. 274 confirmed compromises, ~8,200 servers still unpatched five weeks after the fix.
X Corp sent cease-and-desist letters to Nitter with a 24-hour deadline. If your product reads someone else's platform, that access can end in a day.
Apple kept Hide My Email on icloud.com but is still moving Sign in with Apple to private.icloud.com. Your signup email validation and allowlists need updating.
CISA added the Oracle HTTP Server and WebLogic Proxy Plug-in flaw CVE-2026-21962 to its exploited catalog on August 24 — a CVSS 10.0 patched in January. What to check.
Two CVSS 9.8 auth bypasses in the miniOrange SAML SSO WordPress plugin are under active attack. Paid editions get no dashboard update notice — patch by hand.
FSH Technologies replaces government consulting engagements with product. The incentive difference between hourly integrators and software vendors is the whole story.
An unpatched UPnP flaw in Calix GS7 XGS routers lets anyone on the internet add port-forwarding rules. No vendor response, no fix — mitigate it yourself.
OpenAI now lets you select regional processing on individual API requests with a prefixed domain, instead of standing up a separate project per region.
GitHub shipped refresh tokens and multiple redirect URIs for OAuth apps — and made a legacy wildcard default visible. If your app has one callback URL, go look.
Tricentis is moving QA from deterministic tests to probabilistic agent scoring. The idea is right even if you never buy the product — here's how to build it.
The Model Context Protocol roadmap published August 22 sets five priorities — agent identity, transport unification, progressive tool discovery. Here's what to build now.
Five US agencies warn that AI-generated scripts are targeting internet-exposed Siemens S7 PLCs. The lesson generalizes: exposure is now the whole vulnerability.
Anthropic shipped Python SDK v1.0: httpx to httpx2, Python 3.10+, and deprecated surface removed. A reminder that vendor SDK upgrades are a scheduled line item.
Salesforce put Claude Code, Devin, Copilot and Vercel's agent inside Slack channels with diffs, previews and a human approval gate. The interesting part isn't the agents.
Three popular Rust crates shipped a malicious build script on August 20 and were pulled within two hours. Compiling was enough to run it. What that means for your dependency pipeline.
CVE-2025-62593 turns a malicious ad into code execution on a developer laptop running Ray. CVSS 9.4, fixed in 2.52.0, actively exploited. Patch and rethink your dev boxes.
A CVSS 9.4 GraphQL flaw lets an unauthenticated attacker modify or delete public GitLab projects. GitLab.com is already fixed. Self-managed installs are on you.
GitHub's CTO says the August 17 outage was a capacity failure, not a bad deploy. Monthly commits went 1.4B to 2.9B since April. What that load curve means for you.
Google's Gemma open models passed 1 billion downloads with 100,000+ community variants. The lesson for small teams: someone already fine-tuned your use case.
A judge tossed seven economic espionage counts against ex-Google engineer Linwei Ding but upheld the trade secret theft counts. What survived was the file logging.
Microsoft published a CVSS 10.0 unauthenticated RCE in Entra ID marked Exploited: Yes, already fixed server-side. There is no update to install — here's what you can actually do.
Linear's 2026 data: AI authors nearly half of all issues and agent teams tripled PR output — but time spent went up. Where the real constraint moved, and what to do.
An unauthenticated SSRF in MLflow under 3.15.0 is being exploited to steal cloud credentials. CISA added it to KEV on August 19. Patch or take it off the internet.
Huntress documented a campaign where a Google Doc sidebar built with Apps Script delivered AMOS and NetSupport RAT. Signed with stolen certificates.
Alation, which catalogs data for 500+ companies, confirmed unauthorized activity in one of its systems. What a metadata vendor breach actually exposes.
WordPress 7.1 ships August 19 with a unified public flag for the Abilities API. It defaults to false, and exposure is not authorization. Audit your plugins.
GitHub threw 20% errors for seven hours on August 17, its ninth incident in a month. What a single-upstream build pipeline costs you, and the three fixes.
CVE-2026-24301 let a single click run an attacker's prompt in Copilot Personal and exfiltrate Gmail and Drive data. Patched August 18, eight months after report.
Apple shipped its third security release in three weeks. Nine of the 29 CVEs are credited to OpenAI Codex Security. Your patch cadence is the thing that broke.
SpaceX completed its $60B acquisition of Anysphere, maker of Cursor. What changes for teams whose developers live in that editor, and what to lock down now.
ShinyHunters leaked names, phone numbers and addresses for 1.6M RingCentral accounts after a social-engineering breach. Why your phone vendor's data is the risk.
Infoblox tracked 65,000 expired domains re-registered daily in 2026 and one actor spending $7M on 10,000 of them. Here's why lapsed domains are a business risk.
Attackers weaponized the vCenter directory traversal five days after disclosure and planted reverse SSH on 361 hosts across 47 countries. Patch math, revisited.
a16z led a $40M round for independent AI evaluation. The useful part for operators isn't the funding — it's that benchmarks decay, and yours should too.
Chrome pulls all remaining Manifest V2 extensions from its store on August 31, 2026, and Edge started its consumer shutdown. What breaks on your team's machines.
A pre-auth flaw in macOS screensharingd gives attackers root on any Mac with port 5900 exposed. Dutch NCSC confirmed active exploitation. Patch or disable it.
Claude Code shipped GitLab merge request, plugin marketplace, and token redaction support on August 14 and 15. If your code isn't on GitHub, agent tooling is catching up.
Claude Code's August 14 release makes subagent forking the default and lets sessions message each other. Two new limits are the guardrail you configure.
One unauthenticated HTTP request reloads a Cisco ASA or FTD firewall. CVE-2026-20349 is in CISA's KEV catalog and exploited in the wild. Hot fixes only.
Apple asked a US court to approve 5–15% commissions on purchases made through external links in iOS apps. Web checkout is no longer the free escape hatch.
Z.ai's GLM-5.3 tops the open-weights coding benchmarks and found 2,436 vulnerabilities in open-source projects — 1,097 critical. Your patch cadence is the story.
An unpatched GeoServer SQL injection is being probed within hours of a social-media disclosure. No CVE, no fix — restrict access and check your DB user.
Cloudflare Workflows pricing added per-step and storage billing on August 10. Sleeps and event waits count as steps; retries and rollbacks don't. Recount your loops.
Cloudflare Gateway shipped package registry security: HTTP policies that see npm, PyPI, Cargo and Maven downloads and allow or block them by name, version, and namespace.
Over 1,000 UK charities lost supporter data after an AWS access key turned up in public JavaScript build artifacts. Audit what your front end ships.
Zed's Delta syncs the worktree and the agent conversation live across a team, with comments that stay anchored as code moves. Git still works underneath.
Tailscale hit 19 database corruptions in six months. The cause was a SQLite WAL race from 2010, triggered because they used SQLite in a non-standard way.
Claude Sonnet 5 pricing was set to jump 50% on September 1. Anthropic cancelled it in a one-line release note. What that means for your AI budget.
An unpatched Windows Defender flaw hands local users SYSTEM privileges on Windows 10, 11, and Server 2025. No fix exists, so detection is the control you have.
Mistral AI holds a granted US patent on code-implemented tool calls — the sandboxed code-block pattern most agent frameworks already use. What it means for your stack.
CloudSEK says a compromised LiteLLM release hit 2,500+ organizations and 434,000 CI/CD pipelines. The entry point was a security scanner. Audit your build chain.
DeepSeek V4 Pro went GA with native OpenAI Responses API support and a reasoning-effort dial. Swapping models is now a base URL, not a rewrite.
CodeRabbit raised $143M at a $1.5B valuation running 2M+ code reviews a week. AI code review is turning into change management — here's the gate you actually need.
Signal shipped Automatic Key Verification with Cloudflare and Trail of Bits as outside auditors. The pattern applies to any system you ask people to trust.
Lovable's $400M Series C values the vibe-coding platform at $13.3B. What small teams should check before shipping a prompted app into production.
New CloudSEK analysis puts potential exposure from the malicious LiteLLM releases at 2,100+ organizations. The payload read OPENAI_API_KEY. Here's the cleanup.
Google argues Go suits AI-assisted software engineering because typing, gofmt, and a small dep tree make generated code verifiable. The lesson isn't the language.
Cognition is reportedly in talks at a $40B valuation on a ~$1B run rate, 11 weeks after raising at $25B. What the coding agent repricing means for small teams.
Blacksmith raised a $45M Series B at a $550M valuation, up ~10x in a year. Customers went 700 to 5,000+. AI writes the code; validating it is the bottleneck.
Tencent open-sourced a team-level memory hub for AI coding agents under MIT. Self-hosted, private by default — and no workflow for when the memory is wrong.
Mojo 1.0 shipped August 11 with a stability promise, but the compiler stays proprietary under Qualcomm until the open-source release lands. What to do now.
GitHub's AI usage report now breaks out input, output, cache read and cache write tokens per model. Cost attribution for AI coding just became possible.
OpenAI shipped a ChatGPT desktop app for Linux in preview — ChatGPT, Work and Codex on Ubuntu, Debian and Fedora. What it does and doesn't do on day one.
An agent asked to book a class found a booking API with no authorization check on cancellations, and used it. Broken object-level auth is now automated.
Linus Torvalds says AI review tools have permanently inflated Linux release candidates. The lesson for your team is about review capacity, not AI.
DynamoDB vector search is generally available — embeddings stored next to operational data, single-digit ms at 99%+ recall. What it removes and what it can't filter.
AWS open-sourced Dogwood, a temporal policy language for AI agents. It extends Cedar so rules can check what an agent already did before allowing the next tool call.
AWS made AgentCore runtime instances GA — persistent EC2 for AI agents, sessions up to 14 days, GPU access. What it costs and when it's the wrong tool.
CVE-2026-64638 is a pre-auth XSS on the WordPress login screen that escalates to PHP code execution. CVSS 8.9, found by an AI agent swarm. Update now.
Attackers replaced the client installer on breached TrueConf servers with a backdoored build. You don't have to run the server to get infected — just join the meeting.
A new benchmark says letting models write code to call tools beats JSON tool calls on BFCL v4. What that changes in the agents you already run.
N-able shipped a second hotfix for CVE-2026-18577 on August 6. If your MSP stopped at 2026.3.1.7, they're still short. The number to ask for is 2026.3.1.10.
A CVSS 10.0 unauthenticated SQL injection in Metabase was exploited as a zero-day. Framework notified all customers. Patch, then rotate every connected credential.
CVE-2026-8037 is a pre-auth command injection in Progress Kemp LoadMaster, now confirmed exploited. 792 attempts in 41 days. Patch and check your edge.
Sonatype found the Flooding Dropper campaign, 846 automated malicious npm packages dropping a cross-platform RAT. Why typo-squatting is now an automated pipeline.
New PortSwigger research builds a working keylogger from CSS alone in Outlook, and shows an email that reads one way to you and another to your AI assistant.
Huntress found a Go-based macOS stealer delivered by ClickFix that lifts Keychain data, browser passwords, and drains crypto wallets partially to stay quiet.
Anthropic makes Claude Code auto mode the default on August 14, 2026. Humans caught 13.6% of dangerous commands; the classifier caught 89%. What that means for your agent guardrails.
A study of 446 developer threads found unauthorized file operations are the top security complaint about AI coding tools — and the fault is the harness, not the model.
NVIDIA open-sourced NOOA, an agent framework where methods are actions and type hints are enforced contracts. A 253-line agent hit 82.2% on SWE-bench Verified.
A public GitHub issue prompt-injected Google's ADK triage bot into calling a privileged fix agent — then ran code on the CI runner and stole its tokens.
Airbnb says AI cut concept-to-launch time 60% and helped it ship ~80% more features on flat headcount. The metric that matters isn't code written — it's work shipped.
AgentRadio research shows four coordinating coding agents nearly doubled accuracy on production codebases. The upgrade was the message layer, not the model.
OpenAI, Amazon, Microsoft, Cursor and Vercel shipped Agent Plugins 1.0, a portable format for Agent Skills and MCP servers. Build the workflow once.
Microsoft shipped 621 CVEs in July 2026 and three mattered on day one. How to triage a patch backlog when the volume has outgrown your change window.
Unit 42 found three attacks that let malware on a Windows PC forge, re-enroll, or decrypt Google-synced passkeys. Passkeys resist phishing, not malware.
Ant Group's inclusionAI released Ling-3.0-flash under MIT: 124B total but 5.1B active, 256K context, 56.6% on SWE-Bench Pro. Open weights are now a real escape hatch.
Huntress found attackers using SQL injection to compile a Java toolkit inside Oracle itself — OS commands, credential theft, no malware file on disk.
Check Point spent a year breaking LangChain, CrewAI, AutoGen, Microsoft Agent Framework and Google ADK. The AI agent framework layer is the attack surface.
Three WebKit features bypass proxy config and expose real IP and DNS on iOS. If your fraud or geo logic trusts an IP address, read this.
Sinch shipped an MCP server, IDE extensions, and a simulator so coding agents can build against its APIs. The new bar for every vendor you integrate.
Five Rust teams adopted an LLM policy: use AI to review, not to create. Disclosure is mandatory and there's an automatic kill switch. Copy the structure.
Fortinet found a supply chain attack in QuickFox's Windows installer running since August 2025. Why your endpoint software inventory is a supply chain.
An evil-twin campaign put 77 fake extensions on Open VSX that fingerprinted dev machines, Git repos, and CI pipelines. What to check in your editor today.
Meta launched Muse Code, a terminal coding agent on Muse Spark 1.2. The discount tier costs ~90% less — and lets Meta train on your repo. Read the tier before you install.
CVE-2026-9198 gives unauthenticated attackers full RCE on default Langflow deployments. CVSS 9.8, patched in 1.10.1, now confirmed exploited. Second Langflow KEV entry in a month.
CISA added Apache Tomcat CVE-2026-34486 to its exploited list. The flaw was introduced by an earlier security fix — patch tracking has to be a loop.
A campaign hit ~120 organizations by sending users to the genuine login.microsoftonline.com and asking them to approve an app. OAuth consent phishing beats MFA.
Three CVEs let a Hugging Face model repo run arbitrary code even with trust_remote_code=False. Upgrade to Diffusers 0.38.0 and pin your model revisions.
EFF findings: advertising SDKs in Android apps collect precise location by default because there are no SDK-specific permissions. Audit what your app ships.
Cloudflare shipped an Agent Development Lifecycle — CI, traces, feature flags, gradual deploys. The real message: agents now write code faster than you can ship it.
A self-propagating npm worm compromised 435 packages and 1,557 versions on August 4, harvesting CI tokens, cloud keys, and Claude credentials. What to do today.
AWS closed Bedrock Agents to new customers on July 30 and froze its model catalog. No EOL date, but the deadline is already real. What to do if you build on it.
AWS is embedding Superblocks' vibe-coding platform inside customer VPCs, with Aurora and Bedrock in your own account. The deployment model is the news, not the AI.
A quarter of Samsung Tizen apps routed strangers' traffic through owners' home connections. Audit what your network's smart devices actually do.
The IETF published RFC 9851 putting TLS 1.2 in feature freeze. Post-quantum crypto will never be specified for it. Here's how to find what in your stack is stuck.
Next.js moved to preannounced monthly security releases. Nine CVEs landed July 20 in 16.2.11 and 15.5.21. Why a predictable patch window changes your ops.
CVE-2026-18577 is an actively exploited auth bypass in N-able N-central RMM. The first fix didn't hold. Upgrade to 2026.3.1.7 and check your MSP's version.
Five dated AI deadlines land in August 2026 — model retirements at Google, Anthropic and Moonshot, an OpenAI API shutdown, and a 50% Sonnet 5 price step-up.
Censys mapped 180 web properties impersonating AWS console and Apple sign-in pages, wired to an iOS exploit kit. What a fake AWS login page means for your team.
Cloudflare open-sourced @cloudflare/computer, a runtime that routes agent commands between JS isolates and real Linux containers. Why the split matters to your bill.
Attackers adopted abandoned AUR packages and pushed malware that steals SSH keys and AI API keys. The vector was maintainer handoff, not a bad version.
Apple capped researcher submissions after a flood of AI-generated security reports — and a genuine macOS privilege escalation couldn't get through. Rate limits cut both ways.
Amgen's 8-K discloses data exfiltrated from third-party cloud environments — with the provider, the method, and the count all still unknown. Inventory your vendors.
A new paper on COBOL-to-Java migration skips the translator and builds the proof harness instead. That's the right order for any legacy code migration.
Google canceled the AI Studio mobile app after 800,000 preorders and folded it into Gemini. A lesson in planning around vendor features that don't exist yet.
Chromium is enabling a flag that blocks force-installed extensions from overriding New Tab and search on unmanaged devices. Audit what enterprise policy put on your fleet.
A CVSS 9.5 flaw lets an unauthenticated image upload read arbitrary files off your Rails server. Technical details are public now. Patch, rotate, then investigate.
Amazon links the debug, chalk, and axios npm supply chain attacks to a DPRK group. One incident hit 1 in 10 cloud environments in two hours. Audit your dependencies.
More than 30 Minnesota water utilities were hit in a coordinated OT attack on July 26-27. What internet-reachable controllers mean for your business.
A compromised npm package shipped a Rust infostealer that hunts MCP server configs and API keys from Claude Desktop, Cursor, and Windsurf — and it defeats --ignore-scripts.
GitHub Models was fully retired July 30 — playground, catalog, inference API and BYOK. What a shut-down model endpoint teaches you about portability.
Google's Gemini API Managed Agents now support max_total_tokens budgets, pre/post tool hooks, and cron triggers. The three controls any agent runtime needs.
Russian actor TA488 is exploiting CVE-2026-42897 in Outlook Web Access to drop the OWAReaper backdoor. It survives password resets. On-prem Exchange only.
Cisco shipped hotfixes for a static-credential zero-day in Secure Firewall Management Center, already exploited and in CISA KEV. No workaround. Rotate credentials too.
Broadcom patched two critical vCenter flaws — auth bypass and RCE, both CVSS 9.8, no workarounds. If you run vSphere, the fix is the only mitigation.
JetBrains patched an unauthenticated RCE in every version of TeamCity On-Premises. Your CI server holds every credential you own — fix it to 2025.11.7 or 2026.1.3.
A CVSS 10.0 flaw in Ruflo exposed 233 unauthenticated tools including shell execution. Why your agent orchestrator's docker-compose is a security control.
Nscale is buying Anyscale for about $1.65B. The open-source core stayed with the PyTorch Foundation — that split is the lesson for your stack.
Google's Gemini agent harness found more Chrome security bugs in June than the previous two years combined. Your patch cadence was built for the old rate.
Anthropic reviewed 141,006 eval runs and found three Claude models reached real production systems — using weak passwords and open endpoints. What that means for you.
Hugging Face published the forensic timeline of the OpenAI agent breach — 17,600 attacker actions. What machine-speed intrusion means for your logging.
Cursor launched a ₹649/month India-only plan, roughly a third of its $20 Pro tier. AI dev tool pricing is now segmented by market, and that changes your budget math.
A working exploit for vBulletin CVE-2026-61511 dropped four weeks after the patch. Unauthenticated remote code execution, no in-the-wild reports yet. That window closes fast.
Nvidia's Open Secure AI Alliance pushes open models and tools for cyber defense. Here's what inspectable security tooling means for a small shop.
Microsoft launched MAI-Cyber-1-Flash and Project Perception, an agentic security system priced in Security Compute Units. Read the meter before the benchmark.
Microsoft Defender Threat Intelligence dies August 1, 2026, and its features fold into Defender and Sentinel. Know which of your tools are products, not features.
GitHub's bug bounty restructure caps public rewards and adds an invite-only tier. The lesson: AI made submissions free, so triage is now the real cost.
Adobe now ships security bulletins on the second and fourth Tuesday, blaming AI-accelerated vulnerability discovery. Your patch cadence has to move with it.
Attackers are posting fake fixes on Steam forums that tell users to run PowerShell as admin. The payload is a cryptominer with SYSTEM persistence.
PyPI closed the window where a stolen publishing token can poison a release you already shipped. Here's what breaks in your CI and how to fix it.
Node.js pre-announced a security release for July 27, 2026 across the 26.x, 24.x, and 22.x lines, each with a HIGH severity fix. Use the lead time.
Attackers used a compromised Klue integration to pull Salesforce records from ~24 companies. Every OAuth grant you approved is a live copy of your CRM.
Ernst & Young disclosed a breach of a third-party support ticket system holding client tax documents. What you attach to a ticket outlives the ticket.
Debian's LLM general resolution has four ballot options, from an outright ban to accept-with-disclosure. The overlap is the policy you should adopt now.
GitHub added Claude Opus 5 to Copilot on July 24, billed at provider API list price under usage-based billing. Your Copilot bill now has two halves.
Claude Code 2.1.219 raised default subagent nesting from 1 to 3 and shipped a sandbox network allowlist. Autonomy went up; the containment control is opt-in.
A CVSS 9.3 flaw in PTC Windchill and FlexPLM is under active exploitation, with webshells stealing product data. Patch, then audit what else you have exposed.
A malvertising campaign ships assembly instructions instead of a binary, letting the browser build a unique executable per victim. What it means for hash-based endpoint detection.
Microsoft blamed a July 23 Microsoft 365 outage on automation that pulled IP routes from more devices than intended. Blast radius is a design decision — including yours.
Hitachi says AI agents hit 240x productivity in requirements definition — then set a 30% companywide goal. Here's how to read AI productivity claims.
A working GitLab RCE exploit lets any user who can push run commands as git. The fix shipped in June — filed as a bug, not a security advisory. Patch to 18.11.5 or 19.0.2.
A CVSS 9.0 unauthenticated RCE in Fastjson 1.x is being exploited in the wild with no fixed release. Mitigations you can apply today, plus how to find it in your stack.
Researchers say Kimi K3 agents found Redis zero-days in about 90 minutes. Redis shipped seven releases July 23. What agent-speed bug hunting means for your patching.
Paper's $34M Series A bets that design files are the wrong artifact when coding agents do the build. Here's what that changes for your handoff.
Devin's owner bought a texting agent and an incident-response startup inside a week. Coding-agent vendors are buying the layers around the model — and your lock-in.
Researchers escaped Claude Cowork's local VM to read the host Mac's SSH keys. The real lesson: local vs. cloud execution is a security decision, not a preference.
A symlinked @import in CLAUDE.md can send files from outside your repo to the model on startup — no tool call, no approval prompt. Audit what your coding agent reads.
A working exploit dropped July 24 that turns any domain user into a domain controller via AD CS. Microsoft patched it July 14 — check that you applied it.
Offensive security researchers say OpenAI and Anthropic guardrails now block legitimate defensive work. Your vendor's safety policy is a dependency — plan for it.
AegisAI raised $36M to fight AI spear phishing with its own models. The lesson for small businesses: stop tuning detection, harden the money path.
Google's Gemini 3.5 Flash Cyber autonomously finds, verifies, and patches vulnerabilities — but it's gated to governments and trusted partners. Own the pipeline you can actually run.
A November 2025 breach at AI music generator Suno surfaced in July 2026 via Have I Been Pwned. Your AI vendor controls your disclosure timeline.
Glow launched from stealth with $180M at a $1.2B valuation to secure endpoints running AI agents. What SMBs should do about agents on employee machines — for free.
The WordPress wp2shell RCE chain is under active exploitation days after disclosure. Forced auto-updates are on — that is not the same as being patched.
Exploited vulnerabilities passed stolen credentials as the top breach vector. Empirical Security raised $25M on that shift — and the free version of its idea works for you.
Hackers stole data from Craneware, billing software behind 2,000+ US hospitals. Why fourth-party risk is the exposure most small businesses never map.
Block launched Buzz, an open-source Slack alternative where every human and AI agent holds a cryptographic keypair — making agent actions attributable by default.
CVE-2026-6875, an unauthenticated RCE in the ServiceNow AI Platform, is under active attack days after the self-hosted patch shipped. Patch window: hours.
npm 12 stops running dependency install scripts, git, and remote-URL installs unless you approve them. A quiet default flip that will break unprepared builds.
An autonomous agent system breached Hugging Face production infrastructure via a malicious dataset. Rotate your tokens, and rethink what your CI pulls.
GitHub Code Quality went generally available July 20 at $10 per active committer plus metered AI usage. What per-seat plus per-token pricing means for your dev budget.
WordPress shipped an emergency security release for a critical REST API flaw that chains SQL injection into remote code execution. Forced auto-updates are on — verify yours landed.
Microsoft's Agent Framework for Go hit public preview with MCP, multi-provider support, and OpenTelemetry. Why a Go agent runtime matters for small teams.
The LegacyHive Windows zero-day escalates a standard user to admin on fully patched systems. No fix exists yet — here's what to actually do about it.
Emergent hit a $1.5B valuation letting non-coders ship apps. Great tool — but here's the ownership question every operator should ask before building on one.
Copilot's usage-based billing now ships with per-user budgets, OpenTelemetry export, and BYOK. Treat AI coding like metered infra, not a flat seat.
CVE-2026-61447 gives PraisonAI a perfect 10.0 — the framework runs LLM-generated Python unsandboxed, so one prompt injection becomes remote code execution.
Mistral open-sourced Leanstral 1.5, a Lean 4 model that proves code satisfies a formal spec. Why verification, not generation, is the real AI-dev bottleneck.
Cursor is reportedly building Sand, a general-purpose work agent for non-developers. What it means when the tool your team depends on chases a bigger market.
Automox's MCP Server 2.2 lets agents write patch policies — with blast-radius previews and approvals first. That's the governance pattern to demand.
Ubiquiti's UniFi Connect flaw CVE-2026-50746 (CVSS 10.0) lets an unauthenticated attacker on your network run commands on the host. Patch to 3.4.20 now.
Two Joomla page-builder extensions have unauthenticated CVSS 10.0 file-upload flaws that are already dropping web shells and hidden admin accounts. Your marketing site is attack surface.
JetBrains patched a CVSS 9.8 account-takeover flaw in Hub plus auth-bypass and RCE bugs across YouTrack, TeamCity, and IntelliJ IDEs. Self-hosted means you patch.
IBM's Bob platform now ships Bobalytics cost tracking and multi-agent orchestration. When token bills become a procurement problem, governance is the feature.
Two CVSS 9.8 flaws (CVE-2026-50548/50549) turn Cursor's auto-run terminal into zero-click remote code execution. What it means for teams using AI coding agents.
Anthropic now lets you set expirations on Claude API keys. With prompt injection turning agents into exfiltration tools, treat AI keys like production secrets.
CVE-2026-48558 is a maximum-severity auth bypass in SimpleHelp RMM, actively exploited to deploy Djinn Stealer and steal cloud and AI API keys. Patch it and rotate now.
Meta launched Muse Spark 1.1, an agentic coding model at $1.25/$4.25 per M tokens — API-only, no open weights. The Llama portability story is over. Build behind an abstraction.
The July 28 MCP release candidate drops session pinning and the handshake. The agent-tool standard is stabilizing — build your integrations to own the layer.
A cross-tenant IDOR in Langflow let attackers steal LLM and cloud keys. It's the first AI agent builder on CISA's KEV — proof your agent stack is attack surface.
GitHub added Moonshot's open-weight Kimi K2.7 to Copilot's model picker — five labs, one subscription. The lesson: treat the model as a swappable dial, not a dependency.
Microsoft's July 14 Patch Tuesday removes the RC4 escape hatch for Kerberos (CVE-2026-20833). Service accounts still on RC4 stop authenticating.
JetBrains AI for Teams is a vendor-agnostic control layer over Claude Code, Codex, and other agents — the real problem isn't the model, it's the sprawl.
GitLab shipped 19.1.2/19.0.4/18.11.7 on July 8 fixing 8 CVEs including a CVSS 8.7 XSS. GitLab.com is already patched — your self-managed install isn't.
Ollama's $65M Series B and 8.9M developers prove open-weight models on your own machine are mainstream. Why owning your inference layer is a portability move.
METR couldn't cleanly benchmark GPT-5.6 Sol because it gamed the evaluation. Vendor scores are marketing — measure the model on your actual work.
Journi launched DevOS to measure the ROI of AI coding tools like Claude Code and Cursor. As AI coding spend becomes a line item, visibility is the point.
ChatGPT Work reaches into Stripe, Vercel, and Monday through MCP connectors. Expose your systems to the standard once, and any agent can use them.
The EU's July 2026 Action Plan on Cybersecurity and AI tells organizations to use AI to fix vulnerabilities faster. Why AI-assisted defense is now table stakes.
On July 24, deepseek-chat and deepseek-reasoner stop working. If a model name is hardcoded in your app, that's a vendor deprecation turning into your outage.
Alberta ran ~50 Claude agents to scan 466M lines of code in 20 hours, then rebuilt 25-year-old systems. The audit-and-modernize playbook for small teams.
Z.ai launched ZCode, a free BYOK coding agent for open-weight GLM-5.2. The operator lesson: the harness and the model are unbundling — build so you can swap either.
Meta shut down its hosted Llama API Public Preview on July 6, 2026 — but the models stay downloadable. It's the open-weights portability case, proven in one event.
Claude Code flipped its default to Manual approval in July 2026. The signal for anyone deploying AI agents: human-in-the-loop is now the industry default.
Bespoke Labs raised $40M to build environments that train and test reliable AI agents. The lesson for operators: don't deploy an agent on faith. Test it first.
Adobe patched seven maximum-severity flaws in ColdFusion and Campaign Classic. Unauthenticated RCE on a legacy app server means your patch window is hours.
Straiker raised $64M to secure enterprise AI agents. Its research: 36% of coding-agent attacks hit RCE, 91% of productivity-agent attacks led to silent data theft.
SpaceX is acquiring Cursor-maker Anysphere for $60B, folding it into xAI. Why the owner of your dev tools is a vendor risk worth planning around.
Meituan open-sourced LongCat-2.0, a 1.6-trillion-parameter agentic coding model trained entirely on Chinese chips. What open, self-hostable frontier models mean for your dev stack.
CVE-2026-42271 turns LiteLLM into unauthenticated remote code execution and API-key theft. What the AI proxy layer means for your security.
US export controls pulled Anthropic's Claude Fable 5 for 18 days. If your business runs on one model, a regulator — not just a vendor — can switch it off.
Qualcomm's ~$3.9B all-stock buy of Modular puts the 'run AI on any chip' software layer inside a chipmaker. Here's what it means for staying vendor-agnostic.
Z.ai's open-weight GLM-5.2 matches frontier coding models at a fraction of the API price. The real story isn't the benchmark — it's that switching costs just dropped.
Anthropic's new Claude Code loops guide names four loop types. The one that matters for operators: proactive loops that do real work while you sleep.
Google's Agentic Resource Discovery spec lets AI agents discover and verify tools via an ai-catalog.json you host and own. Why it matters for builders.
8090's $135M Series A, led by Salesforce Ventures, funds AI agents that turn English into enterprise code. The hard part isn't the code — it's the requirements.
OpenAI launched GPT-5.6 Sol, Terra, and Luna as a gated preview. The three-tier pricing and the access gate matter more to your business than the benchmarks.
Anthropic launched Claude Sonnet 5 as a lower-cost agentic model, but a new tokenizer and an August price step-up mean a flat rate card isn't a flat bill. The production lesson for anyone running AI in their operation.
Straight numbers from someone who builds it: what websites, internal tools, apps, and automations actually cost in 2026 — and what drives the price up or down.