FR
live
archive

All articles

Cisco Hardens IOS XE and SD-WAN — 12 Flaws Including Three CVSS 9.9s Found With AI-Assisted Auditing

On August 5, 2026, Cisco shipped a massive hardening release for IOS XE and SD-WAN, bundling fixes for 12 vulnerabilities uncovered during an internal AI-assisted security review. Three reach CVSS 9.9. The era of AI-accelerated vulnerability discovery has hit the network hardware industry — and Cisco just showed what that looks like in production.

Gitea CVE-2026-59774 — Unauthenticated CVSS 9.8 File Read Escalates to RCE on Every Self-Hosted Instance

On August 2, 2026, Gitea shipped a critical fix for CVE-2026-59774, a path traversal that lets an unauthenticated attacker read any server file via Org-mode markup rendering on a public repository. Worse: by reading the INTERNAL_TOKEN from app.ini, the attacker can escalate to remote code execution. Every self-hosted Gitea administrator must patch and rotate secrets immediately.

Meta Launches Muse Code and Undercuts Claude Code by an Order of Magnitude

On August 5, 2026, Meta entered the coding agent market with Muse Code, a terminal agent powered by Muse Spark 1.2. Rather than competing on raw model intelligence, Meta built the most advanced agent harness on the market: multi-agent fan-out, isolated git worktrees, full JSONL audit logging, and pricing up to 10× lower than Claude Code. Here’s what it means for DevOps teams.

Type at least two characters.

navigate open esc dismiss