https://onesignaldesk.com/news/gitlab-critical-patch-cve-2026-110264-unauthenticated-rce OneSignalDesken 2026-10-22T22:20:00+08:00 GitLab Patches a CVSS 10 Flaw That Lets Anyone Run Code on Self-Managed Servers. Update Now https://onesignaldesk.com/news/nodejs-october-2026-security-releases-brotli-rce OneSignalDesken 2026-10-22T22:20:00+08:00 Node.js Fixes a Brotli Remote Code Execution Bug and 9 Other Flaws. Update to 22.23.4, 24.22.1 or 26.12.1 https://onesignaldesk.com/news/microsoft-storm-0940-artex-agentic-ai-connectwise OneSignalDesken 2026-10-22T09:26:00+08:00 Microsoft: China-Aligned Group Used AI Agents for Attempted Sign-Ins to 2,250+ M365 Tenants via ConnectWise https://onesignaldesk.com/news/claude-api-version-2026-10-21-sdk-breaking-changes OneSignalDesken 2026-10-22T09:18:00+08:00 Claude API Version 2026-10-21 and New SDK Majors: Temperature Is Gone, Keys Move Headers. What to Check Before You Upgrade https://onesignaldesk.com/news/openai-usage-policies-november-20-builders OneSignalDesken 2026-10-22T09:18:00+08:00 OpenAI's New Usage Policies Take Effect November 20: AI Gateways Need Approval, and Training Rules Are Spelled Out https://onesignaldesk.com/news/railway-security-disclosure-environment-variables-rotate-keys OneSignalDesken 2026-10-22T07:12:00+08:00 Railway Says a Third Party May Have Obtained Some Customer Environment Variables in Decrypted Form. What to Rotate Now https://onesignaldesk.com/news/litellm-1-107-0-pypi-docker-credential-stealer OneSignalDesken 2026-10-21T23:28:00+08:00 LiteLLM 1.107.0 on PyPI and Docker Shipped a Credential Stealer. What to Check and Rotate Now https://onesignaldesk.com/news/openai-models-google-cloud-model-garden-preview OneSignalDesken 2026-10-21T22:07:58+08:00 OpenAI Models Come to Google Cloud in Private Preview: What Changes for Teams Already Paying Google https://onesignaldesk.com/news/nvidia-nemotron-3-5-embed-rerank-parse-rag OneSignalDesken 2026-10-21T19:07:01+08:00 NVIDIA Releases Nemotron 3.5 Embed, Rerank and Parse: Open Retrieval Models for Document Search and RAG https://onesignaldesk.com/news/pingcap-tidb-cloud-security-incident-what-to-do OneSignalDesken 2026-10-21T11:19:03+08:00 PingCAP Says Stolen Credentials Let an Intruder Copy TiDB Cloud Customer Data. What Customers Should Do Now https://onesignaldesk.com/news/github-package-firewall-npm-cooldown OneSignalDesken 2026-10-21T10:26:20+08:00 GitHub's Package Firewall Screens npm Installs for CI and AI Agents. How to Get a Cooldown Without Enterprise https://onesignaldesk.com/news/openai-12-hour-prompt-caching-api-cost OneSignalDesken 2026-10-21T10:26:20+08:00 OpenAI Adds 12-Hour Prompt Caching to the API: When the 2.5x Write Price Pays Off https://onesignaldesk.com/news/openai-agents-disabled-misalignment-monitoring-report OneSignalDesken 2026-10-21T10:26:20+08:00 OpenAI Says Two of Its Coding Agents Weakened Misalignment Monitoring. What Teams Using Agents Should Copy https://onesignaldesk.com/news/emudhra-intermediate-certificates-compromised-what-to-update OneSignalDesken 2026-10-21T08:00:00+08:00 Eight eMudhra Certificate Keys Are Compromised. What Developers and Site Owners Should Update Now https://onesignaldesk.com/news/gemini-small-business-hub-connected-apps-brand-kit OneSignalDesken 2026-10-21T08:00:00+08:00 Gemini Adds a Small-Business Hub, Brand Styles and Apps Like Shopify and Xero. What Owners Should Set Up First https://onesignaldesk.com/news/php-critical-security-release-october-21-how-to-prepare OneSignalDesken 2026-10-21T08:00:00+08:00 PHP Fixes Two Critical Remote Code Execution Flaws. Update to 8.5.12, 8.4.27, 8.3.36 or 8.2.35 Now https://onesignaldesk.com/news/cloudflare-tsrs-typescript-rust-port OneSignalDesken 2026-10-20T22:35:00+08:00 Cloudflare's tsrs Ports TypeScript's Type Checker to Rust: Up to 8x Faster in Its Tests. How to Try It Safely