News
What happened, and why it matters.
Node.js 26.9.0 Turned On FFI by Default. That's a Feature and a New Risk for Anyone Installing Random Packages
Node.js can now call native code without a C++ addon, no build step required. Here is what that actually enables and what it changes about installing dependencies.
A WordPress Plugin on 600,000 Sites Has Two Unauthenticated Paths to Full Takeover. Patch Today, Not This Week.
The Events Calendar plugin has two critical bugs disclosed September 14: one runs code on your server, the other resets the admin password. Neither needs a login.
Larry Ellison reversed a $7.5 billion Oracle stock sale a day after it went public. The real story is Oracle's negative free cash flow.
Ellison canceled a 10b5-1 plan to sell 50 million Oracle shares the day after it leaked. The headline is a billionaire's stock drama; the number that actually matters is Oracle's negative free cash flow.
Visa, Mastercard and Ant Just Agreed on How to ID an AI Shopping Agent
On September 9, 2026, Ant International, Visa, and Mastercard announced a "Know-Your-Agent" framework to make three separate agent-identity protocols recognize each other, tied to projections of $3 to $5 trillion in AI-agent-driven commerce by 2030. Here's what it actually bridges, and why you shouldn't rush to integrate against a spec that's a week old.
3.25 Million WordPress Sites Are Still Vulnerable to an Unauthenticated SQL Injection in Their Backup Plugin. A Patch Has Existed Since August 20.
CVE-2026-19949 doesn't need a password or a phishing click. It needs a trackback comment and an admin who eventually clicks restore. Two weeks after the fix shipped, roughly two out of three installs still haven't updated.
Microsoft's September Patch Tuesday Fixed a Record 974 CVEs. Two Are Already Being Used Against Exposed Windows Boxes.
Most solo stacks aren't Windows shops, which is exactly why the client RDP box or the SQL Server instance nobody's watching is the one carrying the risk this week.
Amazon Just Paid Qualcomm $4 Billion in Stock Warrants, Not Cash, to Build Its Next AI Chips. That's a Template, Not a One-Off.
Qualcomm and AWS signed a multi-generation deal for custom inference silicon backed by warrants for 25 million Qualcomm shares. The mechanism matters more than the headline number, because it's how hyperscalers are buying their way off Nvidia now.
n8n's Unauthenticated RCE Hit an Estimated 100,000 Servers. Patch to 1.121.0
CVE-2026-21858 lets an attacker with no login at all take over a self-hosted n8n instance through its Form Webhook node. If you run n8n unattended, this is a 20-minute fix, not a re-architecture.
A WordPress core bug needs no password and no plugins to take over your site
CVE-2026-63030 (wp2shell) is a pre-auth RCE in WordPress core itself: no login, no vulnerable plugin, just a stock install and a REST API request.
Claude Fable 5.1 Won't Force a Tool Call Anymore. It Returns a 400 Instead.
Fable 5.1 hard-rejects tool_choice: any and named-tool forcing with a 400 error, on every account, no exceptions. If your agent code depends on the old forced-tool-call pattern, it's already broken and you probably haven't noticed yet.
Congress Wants Every Company Running AI Agents to Keep a Live Inventory of Them
The Stop Rogue AI Act, introduced September 3, would have NIST write the first national rulebook for deploying AI agents. It's voluntary for most companies and mandatory for federal contractors, which makes it a preview, not a rule you can ignore.
Langflow's Critical RCE Went From Advisory to Cryptominer in 20 Hours. If You Self-Host It, This Isn't a Patch-When-Convenient Bug.
CVE-2026-33017 is a CVSS 9.8 unauthenticated remote code execution flaw in Langflow, and attackers weaponized it in 20 hours, before a public proof-of-concept even existed. Here's what the exploit does and the exact fix if you're running an exposed instance.