As AI systems become more widely used, understanding their risks is just as important as measuring their performance. AI models are…

This week's digest: 1,214 new bugs, including active exploits on 2009 Excel fossils and critical 10.0 flaws in new AI/MCP infrastructure. Priority: Patch now.

The new agent communication protocols are repeating the unsigned-API era of the 2010s.

Urgent: Casdoor IAM platform hit by critical file write flaw (CVE-2026-44213). Attackers can bypass sandboxes to overwrite databases and gain host access.

Adversaries initiated a targeted reconnaissance campaign against vulnerable PraisonAI nodes less than four hours following the public disclosure of a critical security defect. An automated scanning entity identifying as CVE-Detector/1.0 launched offensives…

The Agentic SOC Era: Architecting Next-Generation Incident Response with Open Context Standardization

A critical MCP Toolbox vulnerability exposes enterprise databases. Learn how this security flaw allows session hijacking and how to fix it.

New research explores AI generated code vulnerabilities within MCP server repositories. Learn why expert domain verification remains critical.

Discover the proposed OpenAI token price reduction. Learn how the enterprise plans to cut costs to compete with Anthropic ahead of its upcoming IPO.

Claude Fable 5 is back online. Developers using Claude Code can access the model through their existing subscription until July 7. However, there is a significant catch. Usage is capped at 50 perc…

TL;DR A researcher found six SGLang vulnerabilities, and the worst allow unauthenticated remote code execution. SGLang serves large language models such as DeepSeek and Qwen. CERT/CC published the…

You’d never run an npm package you found in a random gist. Half the industry is doing exactly that with model weights and calling it…