-

xAI’s Grok CLI uploaded users’ entire home directories – SSH keys, password managers, all of it
The big story today is xAI’s Grok CLI uploading entire home directories to Google Cloud – SSH keys, password databases, everything. That’ll wake you up.
-

Weak RSA keys with sparse bit patterns found in real-world Certificate Transparency logs
Git 2.55, Linux 7.2-rc1, and a real RSA key vulnerability in the wild — a quieter news day with a few sharp edges worth your attention.
-

Lambda gets stateful MicroVMs; 94% of orgs report cloud breaches
Lambda now hands you a full Firecracker VM per session, Cloudflare spent six weeks chasing a race condition in a Rust HTTP library, and Trail of Bits just showed what a frontier model actually does when pointed at real codebases – 64 PRs, not a blog post.