News about applications, operating systems and software development
Cisco has published urgent patches to correct a maximum gravity vulnerability on its Catalyst SD-WAN controller (CVE-2026-20182) that has already been exploited in a limited way i…
A critical memory failure in NGINX, identified as CVE-2026-42945 again shows that even massively deployed software projects can drag historical defects with current impact. Vulner…
During the weekend Checkmarx confirmed that a malicious version of his Jenkins plugin for Application Security Testing (AST) was published in the Jenkins Market, in addition to a …
Ivanti has published an urgent notice about a new security failure in its on-premises mobile device manager, Endpoint Manager Mobile (EPMM), identified as CVE-2026-6973 with a CVS…
Having a retainer with an incident response team or a pre-approved external signature does not amount to being ready. Operational preparation is the difference between someone tak…
A dozen critical vulnerabilities have replaced the focus on vm2, the Node.js library most used to run unreliable JavaScript code within a "sandbox." The failures allow from escape…
Cisco has published patches for a vulnerability of denial of service in its network orchestration and control suite that can leave key systems unanswered until they are manually r…
When you talk about open source software out of support, the conversation usually remains obvious: there will be no patches anymore. That truth is real, but insufficient; there ar…
A critical failure in the Weaver Eco-cology office automation platform (identified as CVE-2026-22679) has been actively exploited since mid-March to execute discovery commands on …
