AgentDAST / Security newsletter
Recent hacks, important CVEs, and the steps that reduce your exposure.
Add the feed to your RSS reader to receive new briefings.
agentdast.com/newsletter/feed.xmlTailscale 1.104.4 fixes SSH privilege and denial-of-service issues and Serve flaws. Check affected features and review who can reach your production hosts.
TS-2026-014TS-2026-015TS-2026-016TS-2026-017
Socket identified 319 search-hijacking extensions with an estimated 13.4 million installs over a decade. Review browser extensions and search settings.
Read the briefCursor identifies malicious Claude Code extension builds 2.1.312 and 2.1.313. Check the affected installation window and follow the vendor's recovery guidance.
Read the briefCVE-2026-109618 and CVE-2026-109619 can allow unauthenticated code execution. Check PHP2Shell exposure and the PHP releases that fix these critical flaws.
CVE-2026-109618CVE-2026-109619
Next.js 16.4.1 and 15.5.28 address October security issues, including CVE-2026-96889. Check image optimization, Cache Components and Server Actions.
CVE-2026-96889GHSA-673q-mjm6-r5xrGHSA-p3m5-59mp-jv5r
Original summaries from vendor advisories and security research, with links to the evidence. Each brief separates what happened, who is affected, and what to do next.