AI Security

When the AI Deals You a Marked Deck: Vibe Coding's npm Supply Chain Problem

The npm ecosystem absorbed four major supply-chain waves between September 2025 and May 2026. Vibe coding amplifies the blast radius. Here's the technical breakdown.

AI Security

When Prompt Injection Becomes RCE: Inside CVE-2026-26030

A single prompt. One eval() call. Host RCE. Inside CVE-2026-26030 — the Semantic Kernel bypass that turned an AI agent into a remote code execution primitive.