Technology ❯ Software

Software Security

Vulnerabilities Cybersecurity Mobile Operating Systems Vulnerability Management Vulnerability Detection Supply Chain Security Updates CVE Web Server Security Operating Systems

Maintainer GitHub Account Breach Pushes Worm Malware into Keyv/Cacheable npm Ecosystem

A Bun-based dropper is executed automatically during installs and steals a wide range of developer and cloud credentials.

Stories older than 24h

Chrome 151 Ships 370 Fixes as Google Uses AI to Ramp Up Vulnerability Hunting

US and Allied Agencies Publish 2026 SBOM Minimum Elements

Browsers and Enterprise Software Receive Urgent Patches for Multiple Critical Flaws

Cursor Bug Lets Repo-Placed git.exe Run Automatically on Windows

Adobe Issues Urgent Patches for Seven Maximum‑Severity ColdFusion and Campaign Flaws

AMD Fixes Auto‑Updater Flaw but Denies Researcher $10,000 Bounty

Google Releases Emergency Chrome 149 Patch for Actively Exploited V8 Zero‑Day

Torvalds Says Linux Security List Is ‘Almost Entirely Unmanageable’ as AI-Generated Bug Reports Flood In

WhatsApp Discloses Patches for File-Spoofing and URL-Handling Flaws

Microsoft Releases Out-of-Band .NET 10.0.7 to Fix Critical ASP.NET Core DataProtection Flaw

CISA Warns of Active Exploits as Microsoft Fixes 167 Security Flaws

Claude-Led Probe Finds File-Open RCE in Vim and Emacs

LiteLLM Supply-Chain Attack Sees Backdoored PyPI Releases Pulled as Users Urged to Rotate Keys

Google Rushes Chrome 146 Update to Patch Two Zero‑Days Exploited in the Wild

Microsoft’s March Patch Tuesday Fixes 80+ Flaws, Two Public Zero‑Days, No Active Exploits Reported

Cline CLI npm Token Compromise Pushed Tainted Release That Installed OpenClaw

Swiss Study Says Server Compromise Can Undermine ‘Zero‑Knowledge’ Promises in Major Password Managers

SolarWinds Releases Web Help Desk 2026.1 to Fix Critical RCE and Authentication Bypass Flaws

Microsoft Issues Emergency Patches for Exploited Office Zero-Day CVE-2026-21509