There is a critical vulnerability in Oracle Java SE that allows for data theft and tampering. This news broke on the night of ...

Oracle released emergency Java security updates to address CVE-2026-91403, a critical vulnerability that could expose ...

This week, it's PHP, Node.js, and JavaSecurity topics have been continuing this week. I've written about PHP and Node.js, and ...

It said, “We have a problem here.” He had signed it eight times, using eight private keys that belonged to eMudhra, the ...

A chilling look at how eMudhra’s self-distributed keys exposed global trust, revealing systemic flaws in certificate audits ...

October 21, 2026 brought a demanding mix of emergency security updates, poisoned software releases, and warnings about ...

In this blog, Arctic Wolf Labs analyzes PHP2Shell (CVE-2026-109618 and CVE-2026-109619) and discusses active exploitation ...

Echo security researcher Yuval Saggie explains how his team tests and backports fixes for previously unknown vulnerabilities.

Anthropic's new API version moves the SDK key to Authorization: Bearer, which can break gateways expecting X-Api-Key. It also removes sampling controls, with le ...

Security researchers have published the first public proof-of-concept for CVE-2026-86950 , an Apple CoreGraphics flaw Apple says may have been used in attacks against specific targeted individuals.

Mudhra is exiting global TLS after 8 CA keys, one literally the number 4, proved crackable. What happened, who's affected and ...

Follow SUSE’s SP7 procedure to enable FIPS mode, reboot safely, verify the active policy, and check whether your compliance requirement calls for validated modules.