Drupal 12 had a date circled on the calendar for the week of August 10. That week came and went like an ex who texts "we should catch up sometime" and then goes dark — except this time, the project was refreshingly upfront about the ghostin…

Imagine walking up to a checkout counter, and just by standing in the right spot, the cashier hands you someone else's credit card, order history, and saved address — no ID required. That's essentially what just happened to every unpatched …

Jensen Huang apparently made six phone calls, and by the end of them, Wall Street had agreed to mobilize over $500 billion for AI infrastructure. Turns out when you're the company selling the shovels in the world's biggest gold rush, cold c…

Somewhere, a random number generator quietly stopped doing its one job back in March 2021, nobody noticed, and five years later an attacker cashed in the world's slowest-burning fuse — draining nearly 1,200 wallets in under an hour flat. T…

Somewhere in Stockholm, a startup that lets you build a website by typing what you want in plain English just got handed $400 million and a valuation that would make most Fortune 500 CFOs blink twice. Vibe coding, it turns out, is a very fu…

There's an irony so thick you could spread it on toast: a piece of software whose entire job is letting IT teams remotely manage and secure other people's computers just handed strangers the keys to do exactly that, without so much as a pas…

Every few weeks, somewhere in the world, a Drupal site maintainer opens an email, reads three words — "security release available" — and quietly reschedules their evening. This week it's your turn, and honestly, it's not a bad one to lose a…

Somewhere in a 2021 code review, someone checked whether a setting existed instead of whether it was actually turned on. Five years later, that single logical slip just cost Bitcoin holders roughly $88.6 million — proof that in security, th…

You know that feeling when you install one innocent-looking caching library and somehow your GitHub tokens, cloud credentials, and Kubernetes secrets all pack their bags and leave without saying goodbye? That's the ChainDrop attack in a nut…

Somewhere in Menlo Park, someone at Meta decided the best way to needle the "pay per token forever" crowd was to hand out a genuinely capable AI agent for free, no account required, no cloud bill attached. Rude, honestly. Refreshingly rude.…