Tag: 2026-10

All the articles with the tag "2026-10".

• [AUTO] Open-Source AI as a Supply-Chain Attack Tool

  23 Oct, 2026

  State-sponsored attackers are weaponizing publicly available AI frameworks for large-scale supply-chain credential theft.

• [AUTO] OpenCode's Silent Patch Hides Critical RCE

  23 Oct, 2026

  A critical OpenCode vulnerability was silently patched without CVE or advisory, making it invisible to security scanners.

• Claude Wrote 180 Million Lines of Rocq to Verify 123 Libraries

  23 Oct, 2026

  Anthropic and Theorem used Claude to produce assembly-level formal proofs for 239 fuzz-test entry points across 123 OSS-Fuzz libraries. The scale is real; what the proofs guarantee is narrower than the headline suggests.

• [AUTO] PingCAP breach: internal assets exposed, customer data reportedly untouched

  22 Oct, 2026

  PingCAP's database breach exposed internal assets but not customer data, raising questions about what's in the leaked 10.6TB.