Daily notes on AI, testing, and building software.
CVE-2026-34621 is a prototype pollution vulnerability in the JavaScript engine embedded within Adobe Acrobat and Adobe Acrobat Reader that enables attackers to execute arbitrary code by convincing a victim to open a…
CVE-2026-32157 is a critical use-after-free vulnerability (CWE-416) in the Microsoft Windows Remote Desktop Client that allows an unauthenticated attacker to achieve remote code execution on a victim's machine. Patched…
CVE-2026-33827 is a critical race condition vulnerability in the Windows TCP/IP networking stack that allows an unauthenticated remote attacker to execute arbitrary code with SYSTEM-level privileges — no user…
CVE-2026-32201 is a spoofing vulnerability in Microsoft SharePoint Server caused by improper input validation of HTTP request parameters. It was exploited as a zero-day in targeted attacks against organizations before…
CVE-2026-20131 is a maximum-severity (CVSS 10.0) unauthenticated remote code execution vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC). By sending a specially crafted…
CVE-2026-33826 is a high-severity remote code execution (RCE) vulnerability in the Windows Active Directory RPC service, patched by Microsoft on April 14, 2026 as part of Patch Tuesday. An authenticated attacker with…
CVE-2026-33032 is a critical authentication bypass vulnerability (CVSS 9.8) in nginx-ui, the widely used open-source web management interface for Nginx servers, discovered and dubbed MCPwn by Pluto Security. A missing…
The "third wave" of AI testing tools in 2026 moves beyond AI-assisted test writing into fully agentic test generation, autonomous maintenance, and self-healing pipelines — fundamentally changing what it means to be a…
As AI-generated code becomes a default part of software development, a critical gap has emerged: the code LLMs write is largely untested in any systematic way. New research from ArXiv and a new open-source tool called…
As LLM-based agents become production software components, QA teams face a new challenge: traditional test automation was designed for deterministic systems, but AI agents are non-deterministic by nature. New research…