A serious vulnerability has been discovered in Spring Authorization Server, tracked as CVE-2026-22752, putting enterprise authentication … Critical Spring Authorization Server Flaw Exposes OAuth RiskRead more
DevSecOps
Critical Atlassian Bamboo Vulnerability: Your CI/CD Pipeline Could Be at Risk
A severe security vulnerability in Atlassian Bamboo Data Center and Server is putting enterprise CI/CD pipelines … Critical Atlassian Bamboo Vulnerability: Your CI/CD Pipeline Could Be at RiskRead more
NPM Supply Chain Attack Spreads CanisterWorm Malware
A dangerous new npm supply chain attack has emerged, compromising packages linked to Namastex.ai and delivering … NPM Supply Chain Attack Spreads CanisterWorm MalwareRead more
Apache Syncope RCE Vulnerability CVE-2025-57738 Explained
The Apache Syncope RCE vulnerability (CVE-2025-57738) has exposed a serious security gap in one of the … Apache Syncope RCE Vulnerability CVE-2025-57738 ExplainedRead more
GitHub AI Agents Hit by Prompt Injection via Comments
A new class of AI security vulnerability is redefining how attackers compromise development pipelines. Dubbed “Comment … GitHub AI Agents Hit by Prompt Injection via CommentsRead more
Anthropic MCP Vulnerability Enables Critical RCE Attacks
AI security is entering a new—and dangerous—phase. A critical vulnerability in Anthropic’s Model Context Protocol (MCP) … Anthropic MCP Vulnerability Enables Critical RCE AttacksRead more
PHP Composer Vulnerability Exposes Developers to Command Injection Attacks
The recent PHP Composer vulnerability has raised serious concerns across the global development and DevSecOps community. … PHP Composer Vulnerability Exposes Developers to Command Injection AttacksRead more
GPT-5.4-Cyber: AI for Reverse Engineering & Threat Analysis
Artificial intelligence is rapidly reshaping cybersecurity—but not just for attackers. With the launch of GPT-5.4-Cyber, a … GPT-5.4-Cyber: AI for Reverse Engineering & Threat AnalysisRead more
Synology SSL VPN Client Vulnerabilities Let Remote Attackers Access Sensitive Files
Two critical Synology SSL VPN Client vulnerabilities have been disclosed, raising serious concerns for organizations relying … Synology SSL VPN Client Vulnerabilities Let Remote Attackers Access Sensitive FilesRead more
Critical ShowDoc RCE Vulnerability Actively Exploited in the Wild
A critical ShowDoc RCE vulnerability (CNVD-2020-26585) is currently being actively exploited in the wild, putting organizations … Critical ShowDoc RCE Vulnerability Actively Exploited in the WildRead more