Application Security11 September 2026
Datasette 1.0a39/0.65.4: A Case Study in Multi-Tenant Permission Bugs
Two patch releases close a cluster of subtle authorisation bypasses in the open-source data-publishing tool — a reminder that permission checks fail at the edges, not the middle.
datasetteauthorization-bypassopen-source-security
4 min readRead
Threat Intelligence28 August 2026
Patch Discussion to Exploit Probe: Now Measured in Minutes, Not Days
Maintainers are reporting that automated attackers are weaponising vulnerability rumours before a patch even ships — collapsing the gap between disclosure and exploitation from days to minutes.
vulnerability-managementpatch-managementai-security
4 min readRead