Sonatype has discovered and disclosed four vulnerabilities in picklescan, a tool designed to help developers scan Python ...

NSFOCUS CERT detected that Apache issued a security announcement and fixed the remote code execution vulnerability of Apache ...

Elastic patched a critical Kibana flaw (CVE-2025-25012, CVSS 9.9) enabling arbitrary code execution. Update to version 8.17.3 ...

Infosec bytes Kaspersky says it has found more than 200 GitHub repos hosting fairly convincing-looking fake projects laced with malicious software.

The US cybersecurity authority CISA says it has observed attacks on vulnerabilities in Adobe Coldfusion and Oracle Agile Product Lifecycle Management (PLM). Some vulnerabilities are very old and ...

CISA adds Adobe ColdFusion and Oracle Agile PLM flaws to KEV catalog, urging agencies to patch by March 17, 2025, to prevent ...