The weekly email · free
One email a week. Only what changed.
Every new advisory from the past week across the 56 AI tools we track (267 so far), worst first, each with how to check your app and the fix. Every item links its public source.
- One email a week
- Double opt-in, one-click unsubscribe
- We never sell or share addresses
- Prefer feeds? RSS
Past issues
- 2026-11-05Langflow needs another upgrade, MoLing lets any web page in, and Claude Code on macOS
31 new entries this week, from IBM's Langflow bulletins to MCP servers that skip auth. Here's what to check. - 2026-10-29A poisoned LiteLLM release, Supabase's October 30 change, and three Cursor fixes
41 new entries this week, from a credential-stealing LiteLLM build to MCP servers that let anyone in. Here's what to check. - 2026-10-22php2shell, a Node.js security release, and fake AI setup packages on npm and PyPI
16 new entries this week, from PHP and Node.js fixes to MCP servers left open to anyone. Here's what to check.