Technology ❯ Software

Software Security

Vulnerabilities Cybersecurity Mobile Operating Systems Vulnerability Management Vulnerability Detection Supply Chain Security Updates CVE Web Server Security Operating Systems

US and Allied Agencies Publish 2026 SBOM Minimum Elements

The update raises expectations for transitive component coverage, cryptographic proof, stronger procurement leverage for buyers.

Browsers and Enterprise Software Receive Urgent Patches for Multiple Critical Flaws

Cursor Bug Lets Repo-Placed git.exe Run Automatically on Windows

Adobe Issues Urgent Patches for Seven Maximum‑Severity ColdFusion and Campaign Flaws

AMD Fixes Auto‑Updater Flaw but Denies Researcher $10,000 Bounty

Google Releases Emergency Chrome 149 Patch for Actively Exploited V8 Zero‑Day

Torvalds Says Linux Security List Is ‘Almost Entirely Unmanageable’ as AI-Generated Bug Reports Flood In

WhatsApp Discloses Patches for File-Spoofing and URL-Handling Flaws

Microsoft Releases Out-of-Band .NET 10.0.7 to Fix Critical ASP.NET Core DataProtection Flaw

CISA Warns of Active Exploits as Microsoft Fixes 167 Security Flaws

Claude-Led Probe Finds File-Open RCE in Vim and Emacs

LiteLLM Supply-Chain Attack Sees Backdoored PyPI Releases Pulled as Users Urged to Rotate Keys

Google Rushes Chrome 146 Update to Patch Two Zero‑Days Exploited in the Wild

Microsoft’s March Patch Tuesday Fixes 80+ Flaws, Two Public Zero‑Days, No Active Exploits Reported

Cline CLI npm Token Compromise Pushed Tainted Release That Installed OpenClaw

Swiss Study Says Server Compromise Can Undermine ‘Zero‑Knowledge’ Promises in Major Password Managers

SolarWinds Releases Web Help Desk 2026.1 to Fix Critical RCE and Authentication Bypass Flaws

Microsoft Issues Emergency Patches for Exploited Office Zero-Day CVE-2026-21509

Microsoft Issues Emergency Office Patches for Actively Exploited Zero-Day CVE-2026-21509

Anthropic Patches Git MCP Server Flaws Enabling Prompt-Injection RCE