Claude Code approved itself: Guard paused the self-click
Claude Code tried to approve itself with hol-guard approvals approve. HOL Guard paused it. Allow just this once or Keep blocked.
HCS (Hashgraph Consensus Service) Blog3 min read
HCS (Hashgraph Consensus Service) Blog
Stay updated with the latest developments in Artificial Intelligence
Unsloth RCE: malicious Hugging Face model config.json injects code
How to fix CVE-2026-93348: upgrade unsloth-zoo to 2026.8.14+ and unsloth to 2026.8.20+. Malicious Hugging Face model config.json model_type injects code into Unsloth exec path.
HCS (Hashgraph Consensus Service) Blog4 min readBREAKING: Unauthenticated NetScaler RCE hits every appliance (CVE-2026-88771)
How to fix CVE-2026-88771: upgrade NetScaler ADC/Gateway to 14.1-73.37 or 13.1-64.23
HCS (Hashgraph Consensus Service) Blog6 min readWordPress page template include hits CISA KEV
How to fix CVE-2026-87902: upgrade WordPress to 7.1.2 (or your branch patch). Same-day CISA KEV on WordPress Core page-template LFI with conditional RCE.
HCS (Hashgraph Consensus Service) Blog4 min readSharePoint code injection hits CISA KEV
How to fix CVE-2026-65660: upgrade SharePoint Server to the August 2026 fixed builds (SE 16.0.19725.20522 / 2019 16.0.10417.20198 / 2016 16.0.5565.1001). Same-day CISA KEV on SharePoint code injection RCE.
HCS (Hashgraph Consensus Service) Blog4 min readMagento incorrect authorization hits CISA KEV
How to fix CVE-2026-71362: upgrade Adobe Commerce and Magento Open Source to the matching *-2026-aug security train (or APSB26-92 Isolated patch). Same-day CISA KEV on Magento incorrect authorization, no login.
HCS (Hashgraph Consensus Service) Blog5 min readF5 BIG-IP APM OAuth RCE hits CISA KEV
CVE-2026-94127 affects BIG-IP APM when configured as an OAuth Authorization Server. OAuth Client-only and Resource Server-only deployments are not affected.
HCS (Hashgraph Consensus Service) Blog2 min readBREAKING: CVE-2026-94545 Next.js next/og ImageResponse RCE (GHSA-vcvr-r3jv-pc5j)
How to fix CVE-2026-94545: upgrade next to 16.3.6 (15.5.26 hardening if you stay on 15.x)
HCS (Hashgraph Consensus Service) Blog5 min readYour Erlang TLS 1.3 client can trust a server with no certificate
How to fix CVE-2026-89422: upgrade Erlang/OTP to 29.1.1, 28.5.0.7, or 27.3.4.18
HCS (Hashgraph Consensus Service) Blog5 min readTemporal write access can run shell on your Worker Service host
How to fix CVE-2026-89139: upgrade Temporal Server to 1.31.3 or 1.30.7
HCS (Hashgraph Consensus Service) Blog5 min readBREAKING: OpenShift console Devfile API lets anyone SSRF your cluster
CVE-2026-75885 fixes are available across seven OpenShift 4 trains. Upgrade to the fixed release for the train you operate.
HCS (Hashgraph Consensus Service) Blog2 min readBREAKING: WordPress comment XSS lets strangers plant script (7.1.1)
How to fix CVE-2026-93485: upgrade WordPress to 7.1.1. Same-day 7.1.1 security release also closes 10 other core issues.
HCS (Hashgraph Consensus Service) Blog5 min readAborted multer uploads still fill the disk after the 5038 fix
How to fix CVE-2026-88932: upgrade multer to 2.4.0 Abort a multer disk upload before the storage engine names the file, and the complete write can still land…
HCS (Hashgraph Consensus Service) Blog3 min readBREAKING: Unbound DNSKEY digest overflow can RCE your resolver (1.26.1)
How to fix CVE-2026-81642: upgrade Unbound to 1.26.1. Same-day NLnet Labs release also patches CNAME heap corruption, DoH UAF, ReTrap DoS, and related resolver bugs.
HCS (Hashgraph Consensus Service) Blog5 min readHidden command in Claude Code: base64 piped to sh
Claude Code packed a hidden command in base64 and piped decode into sh. HOL Guard paused it. Allow just this once or Keep blocked.
HCS (Hashgraph Consensus Service) Blog3 min readKeep a Codex Task on Track Through Compaction with Context Guard
A practical Context Guard walkthrough: define requirements, compact a Codex task, recover the checklist, and verify the finished document.
HCS (Hashgraph Consensus Service) Blog4 min readScreenConnect client file runs hit CISA KEV
How to fix CVE-2026-84869: upgrade ScreenConnect to 26.6.5 or later, then reinstall host clients and update access agents. Same-day CISA KEV on client file-transfer execution without Host confirmation.
HCS (Hashgraph Consensus Service) Blog4 min readSelf-managed GitLab: unauth commits API file read hits CISA KEV
How to fix CVE-2026-85706: upgrade GitLab to 18.11.12 / 19.0.9 / 19.1.8 / 19.2.6 / 19.3.2
HCS (Hashgraph Consensus Service) Blog4 min read
Showing 36 of 42 stories
Load more storiesAiByts Weekly Brief
Get the top AI news and tools straight to your inbox every week.
Weekly · AI news from HCS (Hashgraph Consensus Service) Blog
Join 15,000+ AI enthusiasts