The brief

Thursday, May 21, 2026

GitHub's internal repos were breached via poisoned VS Code extension—patch immediately and audit developer tools. Google leaked unfixed Chromium exploit code affecting millions; EU's CRA mandates 24-hour vulnerability disclosure starting 2026, reshaping security obligations.

12 stories · 3 podcasts · get this by email each weekday

Today's stories

Worth a listen

  • Marc Andreessen on AI, California, and the Future of America | Joe Rogan

  • Eviltokens: A Conversation with Huntress on an AI‑Enabled Device Code Phishing Campaign

  • Risky Business #838 -- GitHub investigates possible breach

← All editions