WordPress 7.1.2 patches an unauthenticated path traversal in page template resolution that can become remote code execution. Which themes and servers are exposed, how to prove a site is patched, and how to update safely, including Composer and Docker.
WordPress 7.1.1 fixed Click2Shell with two lines: escape a theme slug before it reaches a jQuery selector. Why server-side validation did not help, why the selector failed silently instead of throwing, and how to find the same shape in your own plugin JavaScript.
Anthropic ran Claude on a two-week Firefox security audit and found 22 memory safety vulnerabilities. Here is what that experiment reveals about where AI fits in security testing workflows - and what it still cannot do.