Cover story
CVE-2026-28815
Cantina threat discovery: swift-crypto X-Wing HPKE overread
A memory-safety vulnerability in Apple's swift-crypto library allows out-of-bounds reads when processing malformed X-Wing HPKE encapsulated keys.
· Cantina
Cantina editorial
June 2026 64 stories
The Loop
Intelligence for the new security frontier
Research, perspectives, and field notes from the people closing the loop on security.
Latest stories
Cover story
Dispatches
More from the desk
Analysis / Research / News
supply chain security
05How one VS code extension took down ~3,800 GitHub internal repos
A poisoned VS Code extension compromised a GitHub employee device, exposing 3,800 internal repos in a broader supply chain attack campaign.
Cantina
AI governance
06Translating AI agent policy into runtime control: A working map
Cantina
Apple Security
07Cantina x Swif: iOS 26.5 security guide, 2026's biggest Apple patch cycle
Cantina
CVE
08What four CVEs in fourteen days tell Us about AI infrastructure risk
Cantina
Linux security
09When a linux networking flaw lets a local foothold turn into root across major distros
Cantina
cargo theft
10The FBI's cargo-theft alert shows how load-board fraud becomes freight loss
Cantina
WebKit
11Apex found a 13-year-old bug in WebKit. Apple patched it yesterday
Cantina
AI agents
12AI agent governance Is moving from policy to runtime control
Cantina
Page 2 of 6 · 64 stories