Security
ToolHive: Run Untrusted MCP Servers Without Handing Over Your Machine
ToolHive puts every MCP server in a container with a minimal permission profile. It shrinks the blast radius, it does not remove the bomb.
Security
Security
CISA Left Its Own Keys on GitHub for Six Months
CISA leaked its own AWS keys on GitHub for six months
Security
LiteLLM CVE Exploited in 36 Hours, Putting High-Spend AI Keys at Risk
A popular Python AI gateway was weaponized in under two days. Attackers went after high-value OpenAI and AWS credentials, not profile data.
Security
GitHub Patched a Critical git push RCE in Under Two Hours. GHES Admins Still Have Work.
GitHub disclosed CVE-2026-3854, where the friendly git push path became the RCE door.
Security
GitHub Wants You to Hack an AI Agent. Here Is Why You Should.
83% of orgs plan agentic AI, 29% can secure it. Two hours in a CTF teaches more than a production breach.
Security
GlassWorm Uses Zig Dropper to Silently Infect Every IDE on Your Machine
One fake WakaTime extension on Open VSX, one Zig binary, and every VS Code-compatible editor on your machine is compromised in seconds.