Docker is retiring Docker Content Trust and the Notary v1 service. Use this checklist to find DCT use, plan brownout tests, and migrate to Cosign or Notation.
NPM 12 changes npm install defaults in July 2026. Check CI, WordPress theme builds, native modules, Git dependencies, and approved scripts now.
Arch AUR users should review recent AUR builds after the Atomic Arch campaign hijacked orphaned packages to deliver credential-stealing malware.
CISA KEV guide for DAEMON Tools Lite CVE-2026-8398: remove affected free builds, scan Windows workstations, update, and rotate admin credentials if needed.
CISA KEV guide for Nx Console CVE-2026-48027: update the VS Code extension, review affected workstations, rotate secrets, and rebuild safely.
CISA KEV update for CVE-2026-45321: check TanStack package exposure, rotate build secrets, and rebuild affected projects from clean runners.
