Technology ❯ Software Development

Security Practices

Patch Management Vulnerability Management Access Control Authentication Risk Management Vulnerability Detection Credential Management Incident Response Vulnerabilities Vulnerability Assessment

CISA Sets May 10 Deadline After Ivanti EPMM Zero-Day Is Exploited

The vendor urges immediate patching with credential rotation due to an admin‑authenticated remote code execution risk.

GitHub Patches Critical Git Push RCE as Wiz Warns Most Enterprise Servers Remain Exposed

ZetaChain Patches Gateway Flaw After $334,000 Drain From Team Wallets

Nginx UI Auth Bypass Now Actively Exploited for Full Server Takeover

Google Ships Rust DNS Parser in Pixel 10 Modem to Curb Memory-Safety Flaws

Adobe Issues Emergency Patch for Acrobat/Reader Zero-Day Exploited via Malicious PDFs

CISA Orders Rapid Fix for Actively Exploited Fortinet EMS Zero-Day

Ledger CTO Says AI Is Supercharging Crypto Hacks After $285 Million Drift Exploit

DJI Patches Flaw After Researcher Accesses Thousands of Romo Robot Vacuums

OpenClaw’s Rapid Global Rollout Meets a Wave of Security Alarms

Microsoft Sets Three-Phase Path to Disable NTLM by Default in Windows

Critical 'Ni8mare' Flaw Exposes n8n Servers to Full Takeover as Scans Surge

Cisco Patches ISE File-Read Flaw After Public Exploit

Google Links More State Groups to React2Shell as Wallet-Draining Attacks Spread

Widespread Flaws Let Prompt Injection Hijack AI Coding Tools and CI/CD Pipelines

CISA Adds Oracle Identity Manager RCE to KEV, Citing Active Exploitation and Setting Dec. 12 Deadline

Microsoft Reissues Emergency WSUS Patch as Exploits Spread and CISA Orders Federal Fix

GlassWorm Actively Infects VS Code and OpenVSX Extensions, With 35,800 Installations Reported

Google Won’t Fix Gemini ‘ASCII Smuggling’ That Hides Commands in Calendar and Email

Salesforce Patches 'ForcedLeak' in Agentforce After Researchers Expose AI-Driven Data Leak Risk