Month: <span>October 2026</span>
An MCP Server Workspace Escape, and the Bug Class It Invites
AWS disclosed a vulnerability in its own open-source MCP server on October 1, 2026, and the mechanism is worth more than the…
Rust 1.99 Lets You Define C Variadics. Here’s the Catch
Rust 1.99.0, released on October 1, 2026, stabilizes the ability to define C-ABI variadic functions. Until now Rust could call into C…
Pgpool-II’s Watchdog Protocol, Attacked Seven Ways at Once
Pgpool-II, the connection pooler and automatic failover layer that sits in front of PostgreSQL, shipped five releases on October 1, 2026(versions 4.7.3,…
Python 3.10 Hits End of Life: Eight Final CVEs
Python 3.10 reached end of life on October 1, 2026. The final release, 3.10.22, is a security-only, source-only build, and it carries…
Apache HTTP Server 2.4.69 Fixes 20 CVEs: A Triage Matrix
The Apache Software Foundation released HTTP Server 2.4.69 on October 1, 2026 with fixes for twenty vulnerabilities. Five are rated moderate and…
GitHub Actions macOS 14 Retirement: What Breaks on October 5
If any of your GitHub Actions workflows run on macos-14, they will start failing intermittently on October 5, 2026. GitHub has announced…
Hacktoberfest 2026: Pull Requests No Longer Count
Hacktoberfest 2026 is live now, and it is not the Hacktoberfest you remember. Pull requests no longer count toward rewards. That single…
FortiMail CVE-2026-104286: Actively Exploited, No Patch Yet
Fortinet has disclosed a pre-authentication flaw in FortiMail with a CVSS score of 9.8, and CISA added it to its Known Exploited…