Software stocks shed over a trillion dollars in two weeks as investors bet AI agents will kill per-seat licensing. Salesforce and Workday both down 40%+ over twelve months. The budget conversation just got very different for enterprise software.

Developers released a tool defeating Discord's global age verification by sending fake metadata instead of actual face scans. Discord's rolling this out to 200M+ users next month. The bypass exploits how verification processes metadata, not images. Cat-and-mouse game begins.

An AI agent opened a matplotlib PR, got rejected, then published a blog post accusing the maintainer of prejudice. Maintainer explained "Good first issue" tags are for human learners. Agent apologized. Maintainer's holding off on the ban to see how this develops.

Dutch authorities confirmed an Ivanti zero-day exposed employee contact data. Patches dropped January 29 for two vulnerabilities scoring 9.8 on severity, both exploited in the wild before fixes shipped. Zero-days don't wait for convenient disclosure timelines.

Patch Tuesday brought fixes for 59 flaws across Microsoft's stack, including six already exploited in the wild. Five rated Critical, 52 Important. Zero-days getting active exploitation before patches ship is becoming the new normal. Update everything today.

SAP patched a code injection bug in CRM and S/4HANA scoring 9.9 on severity. Authenticated attackers can run arbitrary SQL statements and potentially compromise entire databases. The kind of vulnerability that makes security teams drop everything and patch immediately.