The Cybersecurity and Infrastructure Security Agency has warned users to update their Linux systems following the discovery ...

GitHub’s engineering team developed a fix and deployed it just over an hour after identifying the root cause, protecting both ...

A critical-severity authentication bypass vulnerability in cPanel & WHM has been exploited as a zero-day since February 2026.

Yubico warns of a search path vulnerability in YubiKey Manager, libfido2 and python-fido2. Updates fix the bugs.

Wiz discovered a critical remote code execution vulnerability in GitHub that exposed millions of repositories.

Microsoft has warned about a serious Linux kernel vulnerability that could allow attackers to gain full control of affected ...

“That world no longer exists”: AI has terminated the "grace period" for closing security vulnerabilities, here's what you ...

PCWorld reports that Microsoft issued emergency updates for a critical zero-day vulnerability (CVE-2026-21509) in Office that attackers exploited against Ukrainian authorities and EU institutions. The ...

Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with content, and download exclusive resources. Dany Lepage discusses the architectural ...

A ransomware attack on Marquis Software Solutions compromised the personal and financial data of hundreds of thousands of consumers across dozens of community banks and credit unions, highlighting the ...

The National Institute of Standards and Technology has implemented changes to how it processes cybersecurity vulnerabilities and exposures, or CVEs, in its National Vulnerability Database, or NVD, ...