Python blocks compromised certificate keys; update each environment
Five expedited Python releases reject compromised eMudhra keys. Refresh package tools and container trust stores too, including copies inside existing virtual environments.
Practical-Defense
SGLang's cache handoff exposed other users' prompt data
Cloudflare reports 155 affected responses from one Workers AI model. Operators need safe rejection, matched cache capacity and fixes for interrupted transfers.
Witness checks build evidence against a signed release policy
The open-source tool can stop releases with missing or untrusted build records. Keep policy authority separate from the build signer and test that rejection actually blocks deployment.