Our view
From the editor’s desk
A day when the bug hunters had more help than the patchers. We've led with the PHP flaws, and if you run anything that decompresses untrusted input, read the Node story too. Then go and check your trust store.
From the Stacksessays worth rereading
How automation can raise the bar on security
Patrick O'Doherty argues that scripted, reproducible infrastructure cuts human error and lets every actor run with the least privilege. That makes audit logs a clean signal. In a week when one stolen developer credential poisoned LiteLLM and a runtime bug hit every PHP server, the secure path still has to be the easy one.
IncrementSecurity, weaponry, and the ethics of trust
Speaking to Hannah H. Kim, David Danks argues that autonomous weapons fail on trust: once a system's behaviour is unpredictable to the people deploying it, nobody should field it. He calls for meaningful human control. It reads differently as Google staff resign over military contracts and agents gain the run of production systems.
Increment