Hirundo says weight edits can remove Qwen3-Coder's pro-CCP bias
Even after the change, generated apps still failed a security benchmark more than half the time.
36
Organization
Trail of Bits
- Mentions · 7d2
- Mentions · 30d9
- All mentions14
- First seenAug 12, 2026
- Last mentioned1d ago
Timeline
14 articles · newest firstBrotli bug CVE-2026-111497 draws patches beyond Node.js
Trail of Bits released an audit tool; Node.js credited OpenAI researchers, and real-world exploitation is not stated.
73
PHP says AI review revived critical bugs first flagged in 2024
Cloudflare saw exploitation attempts Wednesday, while the foundation says Chainguard published the fix before coordinated disclosure.
76
Trail of Bits ships agent plugins for patches and regression checks
A review of over 130 merged PRs found 21 regressions, none of which broke a security protection.
46
PHP patches two critical remote code execution flaws
Unauthenticated code execution was demonstrated on Apache with mod_php under default settings for the memory bug.
82
Package managers have an integrity problem
Trail of Bits tested 25 popular package managers against a malicious repository; fewer than half verified lockfile integrity and only Go verified signatures by default.
60
Critical WordPress Vulnerabilities Enable XSS, SQL Injection and Data Disclosure Attacks
WordPress 7.1.3 patches stored XSS, SQL injection, and unauthenticated disclosure of private-post comments.
62
WordPress 7.1.3 Security Release
WordPress 7.1.3 patches seven flaws, including unauthenticated comment leaks and stored XSS, and is not an emergency.
64
WordPress 7.1.3 Maintenance and Security Release
WordPress 7.1.3 fixes seven vulnerabilities, including stored XSS, SQL injection, and unauthenticated disclosure of private comments.
60
SAML: A fractal of bad design
Security research argues SAML is a legacy protocol with fundamental design flaws and should be deprecated for OpenID Connect.
45
How well do agents use test/verification techniques?
Dan Luu's eval finds coding-agent testing instructions (TDD, formal methods, PBT, skills) mostly fail to beat defaults on Zstd implementation correctness.
38
Coop – Isolated VM Environments for Running Claude Code and Codex
Trail of Bits releases Coop, running Claude Code and OpenAI Codex agents inside isolated virtual machines for safer agentic coding.
28
VMs won't contain cyber-capable agents
Trail of Bits argues virtual machines alone cannot contain cyber-capable AI agents, challenging VM sandboxing as adequate agent isolation.
45
Signal's new security feature checks if your encrypted chats were tampered with
Signal adds automatic key verification, a key-transparency system audited by Cloudflare and Trail of Bits that detects key-directory tampering in E2EE chats.
45
Related CVEs
by mentions- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
- CVE-2026-11149783%9.2Buffer overflow in Google Brotli decoder 1.0.3–1.2.0
- CVE-2026-8790296%8.1Unauthenticated Local File Inclusion to RCE in WordPress Core (fixed in 7.1.2)
Appears with
- Anthropicorganization · 5
- OpenAIorganization · 5
- WordPressvendor · 3
- WordPressproduct · 3
- Patchstackorganization · 3
- Trail of Bitsvendor · 3
- Wizorganization · 2
- Cloudflareorganization · 2
- PHP Foundationorganization · 2
- PHPvendor · 1
- patching-bugsproduct · 1
- PHPproduct · 1
- LiteLLMvictim · 1
- Booz Allenorganization · 1
- Chainguardorganization · 1
- OpenID Connectproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.