News that matters, without the noise.

CVE-2026-9106

Medium Severity Description A UI misrepresentation vulnerability was identified in GitHub Enterprise Server that allowed an OAuth application

Anthropic to restore Claude Fable access on Wednesday

Anthropic has confirmed that the Department of Commerce has lifted export controls on Claude’s two most powerful models, Fable 5

DSA-6374-1 nginx – security update

https://security-tracker.debian.org/tracker/DSA-6374-1

Anthropic rolls out Sonnet 5 with near-Opus 4.8 performance at a lower price

Anthropic is now rolling out Sonnet 5, and it’s almost as good as the Opus range, but it

New BioShocking attack manipulates AI browser into data theft

A new prompt injection attack dubbed “BioShocking” could trick AI-powered browsers into treating real-world risky actions as part

Microsoft accelerates quantum-safe roadmap as risks grow

Microsoft announced today that it is accelerating its quantum-safe security roadmap, saying advances in quantum computing are bringing

Malicious PyPI packages give hackers control of Telegram bot servers

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram forks

New attack provides one more reason why AI browsers are a bad idea

Makers of AI browsers make lofty promises. With a single prompt, users can ask one to find a

Is DEF CON Only For Experts?

Will You Choose the AI-Enhanced Doctor? #AI #Healthcare

CIA chief highlights major shifts in agency’s tech approach

CIA Director John Ratcliffe said artificial intelligence capabilities are “akin to digital nuclear weapons.”

Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data

New Microsoft research shows how attackers can hijack AI agents that act on a user’s behalf, using nothing more than