Technology ❯ Software

Software Security

Vulnerabilities Cybersecurity Mobile Operating Systems Vulnerability Detection Vulnerability Management Supply Chain Attacks Patch Management Database Security Data Protection Web Application Security

WhatsApp Discloses Patches for File-Spoofing and URL-Handling Flaws

The fixes address weaknesses that could aid phishing without any sign of real-world attacks.

Microsoft Releases Out-of-Band .NET 10.0.7 to Fix Critical ASP.NET Core DataProtection Flaw

Claude-Led Probe Finds File-Open RCE in Vim and Emacs

LiteLLM Supply-Chain Attack Sees Backdoored PyPI Releases Pulled as Users Urged to Rotate Keys

Google Rushes Chrome 146 Update to Patch Two Zero‑Days Exploited in the Wild

Microsoft’s March Patch Tuesday Fixes 80+ Flaws, Two Public Zero‑Days, No Active Exploits Reported

Cline CLI npm Token Compromise Pushed Tainted Release That Installed OpenClaw

Swiss Study Says Server Compromise Can Undermine ‘Zero‑Knowledge’ Promises in Major Password Managers

SolarWinds Releases Web Help Desk 2026.1 to Fix Critical RCE and Authentication Bypass Flaws

Microsoft Issues Emergency Patches for Exploited Office Zero-Day CVE-2026-21509

Microsoft Issues Emergency Office Patches for Actively Exploited Zero-Day CVE-2026-21509

Anthropic Patches Git MCP Server Flaws Enabling Prompt-Injection RCE

Microsoft January Windows Patches Fix Active Exploit, Cause Cloud Logins and Shutdown Bugs

Veeam Ships Fixes for Critical Backup & Replication RCE, Urges Update to 13.0.1.1071

Android’s January Patch Fixes Critical Dolby DD+ Flaw as Samsung Plans Play System Update Return

CISA Orders Federal Agencies to Patch Actively Exploited MongoDB ‘MongoBleed’ Flaw

React2Shell Attacks Intensify as React Issues Second Round of Emergency Patches

Widespread Flaws Let Prompt Injection Hijack AI Coding Tools and CI/CD Pipelines

OpenAI Launches Aardvark, a GPT-5 Security Agent in Private Beta

Hundreds of Secrets Found in VS Code Extensions as Microsoft Blocks Leaky Uploads