CrowdStrike and Tenable informed customers this week about potentially serious vulnerabilities found and patched in their ...
The Bitwarden CLI NPM package compromise is tied to a Checkmarx supply chain attack and references the Shai-Hulud worm.
CVE-2026-33626 exploited within 13 hours of disclosure, enabling SSRF-based cloud credential theft and internal scanning.
Node.js does not need more theatrical security output. It needs better developer workflow infrastructure. It needs tools that ...
Microsoft plans to integrate Anthropic’s Mythos AI model into its Security Development Lifecycle, a move that suggests ...
The 9.1-CVSS vulnerability enables attackers to circumvent RCE protections in the de facto template engine for the Java ...
GitLab 18.11 helps address those gaps with platform-native agents that have access to the code, pipelines, issues, and ...
Last week, something alarming happened in the world of software — and almost nobody outside the tech industry noticed. A ...
A new AI model could automate the process of searching for cybersecurity bugs and flaws – for better or worse.
Azul, the trusted leader in enterprise Java for today's AI and cloud-first world, today highlighted growing security risks for enterprises relying on free, unsupported Java runtimes. Azul demonstrated ...
A monthly overview of things you need to know as an architect or aspiring architect. Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with ...