Do Son
TL;DR CISA added the TeamCity vulnerability CVE-2026-63077 to its Known Exploited Vulnerabilities catalog. The flaw allows unauthenticated...
CI/CD security
TL;DR Jenkins patched a critical Jenkins vulnerability, CVE-2026-70426, that bypasses the JEP-200 deserialization filter. Attackers with Agent/Connect...
At a glance Malware family Shai-Hulud variant (“Mini Shai-Hulud”) Threat actor Unattributed; linked to the Shai-Hulud lineage...
TL;DR A flaw in WordPress Coding Standards lets malicious PHP run code on the machine that lints...
Attackers are already abusing a critical Jenkins RCE vulnerability in the wild. Tracked as CVE-2026-53435, the flaw...
Security Researchers Uncover Advanced Open Source Supply Chain Exploits A fresh threat report exposes an ongoing software...
In a critical security alert for the PHP community, Nils Adermann, Co-Creator of Composer, has issued an...
A critical security vulnerability has been found in WebdriverIO, a popular open-source test automation framework used for...
The software supply chain has just weathered another high-impact assault. The Socket Threat Research team has uncovered...
A highly sophisticated software supply chain attack has compromised tens of thousands of developer workstations and CI/CD...
Security researchers at Socket have uncovered a coordinated software supply chain campaign orchestrated through the GitHub account...
Cybersecurity analysts at Darktrace have uncovered a new distributed denial-of-service (DDoS) botnet that specifically targets the video...
The Jenkins project has released a security advisory, addressing several vulnerabilities across its plugin ecosystem. The fixes...
Security researchers have sounded the alarm on a precision-targeted supply-chain compromise striking the SAP developer ecosystem. The...
A critical update has been issued for Gemini CLI (@google/gemini-cli) and the run-gemini-cli GitHub Action to address...
A new report from researchers at TrendMicro has exposed the evolution of Void Dokkaebi (also known as...
The PHP development community is facing a significant security risk following the disclosure of a critical argument...
Atlassian has issued a high-priority advisory for its Bamboo Data Center users, detailing a critical-severity security flaw...
The digital defenses of the European Union faced a significant test this March as a sophisticated supply-chain...
The Jenkins project has released a critical security advisory addressing multiple vulnerabilities that could lead to full...
Atlassian has sounded the alarm for users of its Bamboo Data Center, uncovering a high-severity Remote Code...
In a sophisticated supply chain manipulation, the xygeni-action GitHub Action was recently targeted by a critical “tag...