Weaver E-cology critical bug exploited in attacks since March

Hackers have been exploiting a critical vulnerability (CVE-2026-22679) in the Weaver E-cology office automation since ...

One command turns any open-source repo into an AI agent backdoor. OpenClaw proved no supply-chain scanner has a detection category for it

CLI-Anything generates SKILL.md files that AI agents trust and execute. Snyk found 13.4% of agent skills contain critical ...
InfoWorld

Critical GitHub RCE bug exposed millions of repositories

The now‑patched flaw allowed authenticated users to execute arbitrary code via crafted git push requests, affecting ...
InfoQ

GitHub Enhances CodeQL with Declarative Security Modeling for Faster, More Flexible Analysis

GitHub has introduced a significant update to its CodeQL engine, enabling developers to define custom sanitizers and ...
Hosted on MSN

AI bug scanners find thousands of flaws, but fixes lag

Anthropic’s Project Glasswing has leveraged its Claude Mythos model to detect over a thousand zero-day vulnerabilities across major operating systems and browsers, demonstrating AI’s growing role in ...
NPR

Code Switch

May 2, 2026 • Motherhood in the U.S. is revered. Actual mothers? Not so much. So where's a bedraggled mom to turn when she feels overworked, overwhelmed, and underappreciated? Turns out, momfluencers ...