news

A newly disclosed vulnerability in Drupal Core presents a significant risk of remote code execution and data compromise for organizations utilizing PostgreSQL databases. The flaw, rated as highly critical, allows unauthe

A compromised developer tool allowed attackers to access thousands of GitHub's internal code repositories, highlighting critical vulnerabilities in software supply chains and developer workflows. Published: 2026-05-21 |

A nine-year-old vulnerability in the Linux kernel, now publicly disclosed, allows unprivileged local users to escalate privileges and gain root access on major distributions. The flaw, tracked as CVE-2026-46333, has sign

A single cached access key or an overlooked role assignment can grant attackers unfettered access to nearly all of an organization's cloud assets, transforming legitimate identities into critical vulnerabilities. Publish

New open-source initiatives from Microsoft aim to integrate security testing directly into the AI development lifecycle, addressing potential vulnerabilities before deployment. Published: 2026-05-20 | Author: Patrick Mat

A sophisticated malware-signing-as-a-service (MSaaS) operation, weaponizing Microsoft's own signing infrastructure, has been dismantled by the tech giant, impacting thousands of systems globally with ransomware and other