As offices go quiet between Christmas and New Year's, security teams brace for a busy stretch fending off hackers. Why it matters: Malicious hackers are opportunistic — and what's better than ...

Apache Commons Text is used for processing character strings in Java apps. A critical vulnerability allows the injection of ...

Attackers are exploiting a Flight protocol validation failure that allows them to execute arbitrary code without ...

As “The Net” celebrates its 30th anniversary in the annals of cinema history, I decided to revisit this slice of Americana ...

Software supply chain attacks are evolving as open source and AI-generated code introduce new third-party risks. Learn how ...

In a nod to the evolving threat landscape that comes with cloud computing and AI and the growing supply chain threats, Microsoft is broadening its bug bounty program to reward researchers who uncover ...

The latest ThreatsDay Bulletin breaks down the week’s biggest stories — rootkits evading Windows, Docker leaks, AI risks and global surveillance moves ...

Sonatype has claimed that 13% of Log4j versions downloaded this year were vulnerable to the legacy critical Log4Shell bug ...

Ongoing vulnerable Log4j downloads suggest the supply chain crisis wasn’t the wake-up call it should have been. Back in December 2021, the “internet on fire” headlines weren’t hyperbole. Security ...

The Apache Software Foundation has released an emergency security update today to patch a zero-day vulnerability in Log4j, a Java library that provides logging capabilities. The vulnerability, also ...