Nothing ruins a Tuesday quite like a researcher posting a critical zero-day on X and watching the exploitation attempts roll in before lunch. That's exactly what happened to GeoServer, the open-source mapping platform, on August 12 — and th…

Every open-source ecosystem has that one drawer full of extension cords you're pretty sure are still safe to use. Drupal's contrib module library is that drawer, and this month the security team did some very public spring cleaning. Ten Ad…

Every cybersecurity vendor on Earth wants to sell you an AI-powered, zero-trust, cloud-native threat response platform. T-Mobile's security chief solved his Chinese state-hacker problem with a pair of scissors and a road trip. Sometimes the…

Three months ago OpenRouter was worth $1.3 billion. This week Stripe agreed to pay more than $7 billion for it. That's not a valuation bump, that's a valuation cannonball, and it tells you exactly how nervous every big fintech company is ab…

Nothing says "we're serious about this relationship" like handing your cloud customer the option to buy $12.2 billion of your stock. That's the vote of confidence Marvell just gave Google, and it's the clearest sign yet that the AI chip arm…

Picture the world's most elaborate LinkedIn scam, except the scammer isn't a guy in a call center — it's an AI agent, the fake identity is a "German engineer" named Lena Brandt, and the target is a 24-year-old computer science student who'd…

Nothing ends a relationship faster than radio silence, and three Drupal contrib modules just got ghosted so hard the security team had to step in and make it official. As of August 19, Screenshot, Link content parser, and Gammu SMS Daemon a…

No link to click, no shady app to download, no "you've won a prize" text message to fall for. Just a photo — the most innocent file format on the internet — quietly doing something it was never supposed to do the moment your phone tries to …

Somewhere in rural Ohio sits a patch of land that used to enrich uranium for the Cold War. Now it's about to enrich Nvidia's balance sheet instead — the site is getting reborn as one of the largest AI data center campuses ever built, and th…

Somewhere, a security scanner meant to catch vulnerabilities became the vulnerability. The tool literally named after finding software risks got compromised, then quietly poisoned the CI pipeline of one of the most widely used AI gateway li…