You bolted an LLM gateway onto your stack to make AI adoption feel enterprise-grade — centralized keys, clean auth, one throat to choke. Turns out that throat had a loophole, and cryptominers found it before most admins even knew LiteLLM wa…

Picture this: you've done everything right. Patched every module, applied every security bulletin the moment it dropped, slept soundly knowing your online store was buttoned up tight. Then a researcher discovers a bug so fresh that "fully p…

Some bugs are newborns, barely a CVE number old. This one has been quietly aging in PostgreSQL's basement since 2014, waiting patiently for someone to notice it could turn a routine backup account into a database emperor. How "Replication"…

While other platforms ship "when it's ready" (translation: eventually, maybe, don't hold your breath), Drupal just quietly confirmed its next major version is arriving on schedule, like a very reliable train that also happens to be open sou…

Somewhere out there, a single "|" character just did more damage than most zero-days manage in a year. That's the whole story behind the Forminator Forms flaw currently keeping WordPress admins up at night. The Blocklist That Blinked Formi…

Playing hard to get usually costs you the deal. In this case it cost Nvidia an extra $12.4 billion. Hugging Face turned down a $500 million offer from Nvidia last year — this week Nvidia came back with $12.93 billion, and this time everyone…

Every so often a new model shows up, aces every test in the room, and casually asks if there's an extra-credit assignment. Meet GPT-6 Astra, OpenAI's newest release, which posted scores so clean you'd assume grading was optional. The Repor…

Nothing quite says "we're serious about the future" like the world's most valuable oil company signing paperwork with a company that builds computers cooled colder than deep space. Quantinuum and Saudi Aramco inked a non-binding memorandum …

Two companies that have spent years teaching machines to talk just decided they'd rather do it together. SoundHound AI officially closed its acquisition of LivePerson on September 4th, and the resulting company can now talk to your customer…

Nothing says "move fast and break things" quite like a code execution bug that lets strangers root your server just by asking nicely. Langflow, one of the most popular open-source tools for building AI agent workflows, is having exactly tha…