The LinkLoot Blog

7/20/2026 4 min

Vercel Sandbox stops billing internet downloads for agent runs

Vercel Sandbox no longer counts package installs, repository clones, external artifacts, or dataset downloads toward Sandbox Data Transfer usage, while exposed-port traffic and outbound internet traffic remain billable.

Fortinet FortiSandbox CVEs enter CISA KEV with July 19 deadline

CISA added two Fortinet FortiSandbox command-injection flaws to KEV on July 16, with a July 19 remediation deadline for covered agencies and urgent patch priority for exposed appliances.

7/19/2026 3 min

Cloudflare ships emergency WAF rules for active RCE and SQLi attacks

Cloudflare's July 17 emergency WAF release adds block-mode detections for active unauthenticated RCE and SQL injection exploitation in popular web frameworks.

GitHub adds repository-level Copilot metrics for coding agents

GitHub's Copilot usage metrics REST API now reports repository-level activity for Copilot coding agent and Copilot code review across enterprise and organization reports.

WordPress 7.0.2 forces security updates for wp2shell RCE

WordPress 7.0.2 fixes one critical and one high-severity core issue, with forced automatic updates enabled for affected branches and Cloudflare WAF rules available as temporary protection.