Browsing: Flaw

AI coding tools are changing how developers obtain and use software. But the growing volume of automated package installations is creating new challenges for enterprise security teams. A vulnerability uncovered by Bloom Security demonstrates how weaknesses in software publishing infrastructure can intersect with these automated workflows. It could potentially expose organizations to malicious code without…

A critical remote-code-execution flaw in JetBrains TeamCity, the continuous-integration platform used by more than 30,000 development teams worldwide, is now under active exploitation by ransomware crews, the Cybersecurity and Infrastructure Security Agency confirmed on September 23, 2026. The bug, tracked as CVE-2026-63077, carries a CVSS v3.1 score of 9.8 out of 10 and lets an…

Security researchers said that attackers can gain access to credentials, stored mail and other connected systems.

Hackers stole patient data from Qbusoft, a Polish medical software maker, weeks after a breach at another provider exposed records of nearly 19 million people in the country.

I’ve watched four YouTube videos, done a load of laundry, and scored some amazing deals online, getting ready to write this post. Or I might say, avoiding writing this post.

Japanese software company Helpfeel has confirmed a data breach on its screenshot-sharing platform Gyazo, in which attackers exploited a vulnerability in its image upload server, stealing approximately 23.62 million user records and metadata tied to hundreds of millions of images.

Researchers warn the vulnerability could be used by state-linked actors for espionage.

Japan ‘s Digital Agency disclosed that attackers exploited a vulnerability in a VPN device to access its Government Solution Service (GSS), potentially leaking personal information belonging to approximately 246,000 government employees, public officials, and contractors. The breach was detected on June 25 and confirmed as a VPN exploitation on July 9, meaning the public disclosure…

GitLab users are being urged to patch a maximum severity vulnerability in the platform after reports of “in-the-wild” exploitation.

Cisco Talos says three separate threat groups are exploiting two recently patched Secure Firewall Management Center (FMC) flaws. The main target is CVE-2026-20079, a critical authentication bypass that lets unauthenticated attackers remotely bypass security controls, run scripts and potentially gain root access. Attackers also exploit CVE-2026-20316 to access sensitive data through a low-privilege account. The…