Technology ❯ Software

Software Security

Vulnerabilities Cybersecurity Mobile Operating Systems Vulnerability Management Supply Chain Security Vulnerability Detection Patching Supply Chain Attacks Patch Management Data Protection

3 ARTICLES

2w ago

AMD Fixes Auto‑Updater Flaw but Denies Researcher $10,000 Bounty

Researchers say the updater downloaded executables over plain HTTP with no cryptographic signature verification, leaving doubts about the patch’s integrity.

9 ARTICLES

2w ago

Google Releases Emergency Chrome 149 Patch for Actively Exploited V8 Zero‑Day

8 ARTICLES

last mo.

Torvalds Says Linux Security List Is ‘Almost Entirely Unmanageable’ as AI-Generated Bug Reports Flood In

3 ARTICLES

last mo.

WhatsApp Discloses Patches for File-Spoofing and URL-Handling Flaws

4 ARTICLES

2mo ago

Microsoft Releases Out-of-Band .NET 10.0.7 to Fix Critical ASP.NET Core DataProtection Flaw

6 ARTICLES

2mo ago

CISA Warns of Active Exploits as Microsoft Fixes 167 Security Flaws

3 ARTICLES

2mo ago

Claude-Led Probe Finds File-Open RCE in Vim and Emacs

4 ARTICLES

3mo ago

LiteLLM Supply-Chain Attack Sees Backdoored PyPI Releases Pulled as Users Urged to Rotate Keys

9 ARTICLES

3mo ago

Google Rushes Chrome 146 Update to Patch Two Zero‑Days Exploited in the Wild

20 ARTICLES

3mo ago

Microsoft’s March Patch Tuesday Fixes 80+ Flaws, Two Public Zero‑Days, No Active Exploits Reported

3 ARTICLES

4mo ago

Cline CLI npm Token Compromise Pushed Tainted Release That Installed OpenClaw

5 ARTICLES

4mo ago

Swiss Study Says Server Compromise Can Undermine ‘Zero‑Knowledge’ Promises in Major Password Managers

5 ARTICLES

4mo ago

SolarWinds Releases Web Help Desk 2026.1 to Fix Critical RCE and Authentication Bypass Flaws

9 ARTICLES

4mo ago

Microsoft Issues Emergency Patches for Exploited Office Zero-Day CVE-2026-21509

4 ARTICLES

5mo ago

Microsoft Issues Emergency Office Patches for Actively Exploited Zero-Day CVE-2026-21509

3 ARTICLES

5mo ago

Anthropic Patches Git MCP Server Flaws Enabling Prompt-Injection RCE

10 ARTICLES

5mo ago

Microsoft January Windows Patches Fix Active Exploit, Cause Cloud Logins and Shutdown Bugs

4 ARTICLES

5mo ago

Veeam Ships Fixes for Critical Backup & Replication RCE, Urges Update to 13.0.1.1071

6 ARTICLES

5mo ago

Android’s January Patch Fixes Critical Dolby DD+ Flaw as Samsung Plans Play System Update Return

11 ARTICLES

5mo ago

CISA Orders Federal Agencies to Patch Actively Exploited MongoDB ‘MongoBleed’ Flaw

Software Security

AMD Fixes Auto‑Updater Flaw but Denies Researcher $10,000 Bounty

Google Releases Emergency Chrome 149 Patch for Actively Exploited V8 Zero‑Day

Torvalds Says Linux Security List Is ‘Almost Entirely Unmanageable’ as AI-Generated Bug Reports Flood In

WhatsApp Discloses Patches for File-Spoofing and URL-Handling Flaws

Microsoft Releases Out-of-Band .NET 10.0.7 to Fix Critical ASP.NET Core DataProtection Flaw

CISA Warns of Active Exploits as Microsoft Fixes 167 Security Flaws

Claude-Led Probe Finds File-Open RCE in Vim and Emacs

LiteLLM Supply-Chain Attack Sees Backdoored PyPI Releases Pulled as Users Urged to Rotate Keys

Google Rushes Chrome 146 Update to Patch Two Zero‑Days Exploited in the Wild

Microsoft’s March Patch Tuesday Fixes 80+ Flaws, Two Public Zero‑Days, No Active Exploits Reported

Never miss stories about

Software Security

Cline CLI npm Token Compromise Pushed Tainted Release That Installed OpenClaw

Swiss Study Says Server Compromise Can Undermine ‘Zero‑Knowledge’ Promises in Major Password Managers

SolarWinds Releases Web Help Desk 2026.1 to Fix Critical RCE and Authentication Bypass Flaws

Microsoft Issues Emergency Patches for Exploited Office Zero-Day CVE-2026-21509

Microsoft Issues Emergency Office Patches for Actively Exploited Zero-Day CVE-2026-21509

Anthropic Patches Git MCP Server Flaws Enabling Prompt-Injection RCE

Microsoft January Windows Patches Fix Active Exploit, Cause Cloud Logins and Shutdown Bugs

Veeam Ships Fixes for Critical Backup & Replication RCE, Urges Update to 13.0.1.1071

Android’s January Patch Fixes Critical Dolby DD+ Flaw as Samsung Plans Play System Update Return

CISA Orders Federal Agencies to Patch Actively Exploited MongoDB ‘MongoBleed’ Flaw

Never miss stories about

Software Security