News about applications, operating systems and software development
Grafana has confirmed that an unauthorized actor obtained a token that allowed him to access his environment in GitHub and download part of the company's source code. According to…
The second day of Pwn2Own Berlin 2026 made it clear that business security and artificial intelligence are at the centre of modern risk: 15 unpublished vulnerabilities awarded wit…
Cisco has published urgent patches to correct a maximum gravity vulnerability on its Catalyst SD-WAN controller (CVE-2026-20182) that has already been exploited in a limited way i…
A critical memory failure in NGINX, identified as CVE-2026-42945 again shows that even massively deployed software projects can drag historical defects with current impact. Vulner…
During the weekend Checkmarx confirmed that a malicious version of his Jenkins plugin for Application Security Testing (AST) was published in the Jenkins Market, in addition to a …
Ivanti has published an urgent notice about a new security failure in its on-premises mobile device manager, Endpoint Manager Mobile (EPMM), identified as CVE-2026-6973 with a CVS…
Having a retainer with an incident response team or a pre-approved external signature does not amount to being ready. Operational preparation is the difference between someone tak…
A dozen critical vulnerabilities have replaced the focus on vm2, the Node.js library most used to run unreliable JavaScript code within a "sandbox." The failures allow from escape…
Cisco has published patches for a vulnerability of denial of service in its network orchestration and control suite that can leave key systems unanswered until they are manually r…
