News
Why LinkedIn scans 6,000+ Chrome extensions on every page load (2026)
Global CompaniesSecurityPrivacy
LinkedIn has been scanning 6,236 Chrome extensions on every page load while collecting device telemetry. German nonprofit Fairlinked published technical evidence, independently verified by BleepingComputer.
2026.04.0579 views
News
Chrome WebGPU flaw fixed since version 146: where 2026's exploited zero-days stand
SecurityGlobal Companies
Google releases an emergency Chrome update to fix CVE-2026-5281, a use-after-free in Dawn's WebGPU implementation already exploited in the wild. CISA orders patching by April 15. This is Chrome's fourth zero-day of 2026.
2026.04.0390 views
News
Claude Code source code leak: how 512,000 lines escaped via npm, and what came next
SecurityAIDevelopment
Anthropic's Claude Code leaked 512,000 lines of TypeScript via an npm source map. Hidden features including a Tamagotchi pet system and autonomous agent mode were exposed. We explain the technical cause and how developers can prevent the same mistake.
2026.04.0297 views
News
Axios npm package hijacked: RAT pushed to 100M weekly downloads (2026)
DevelopmentSecurity
The popular JavaScript HTTP client axios was hijacked. Versions 1.14.1 and 0.30.4 contained a cross-platform RAT. Google/Mandiant attributed the attack to North Korea-linked UNC1069.
2026.04.0162 views
Roundup
How AI changed software development in 2026: faster shipping, quieter bugs
SecurityDevelopmentAI
AI made development 10x faster. It also multiplied security vulnerabilities. A data-driven analysis of both the benefits and the crises AI has brought to software development, as of March 2026.
2026.03.30125 views
News
Trivy supply-chain cascade: 4 OSS projects compromised in 10 days (2026)
InfrastructureDevelopmentSecurity
A supply chain attack on Trivy cascaded into Checkmarx, LiteLLM, and Telnyx in 10 days. CISA added to KEV. Microsoft and others published analysis.
2026.03.3054 views
News
Laravel Livewire RCE actively exploited by Iranian MuddyWater group (2026)
DevelopmentSecurity
CVSS 9.8 Laravel Livewire vulnerability (CVE-2025-54068) actively exploited by Iranian state-sponsored APT MuddyWater. No authentication required for full server takeover. CISA deadline: April 3.
2026.03.3076 views
