Oracle patches critical Java vulnerability CVE-2026-91403, rated 9.1. Check affected versions and learn how to secure Java applications.

I found 61 vulnerabilities that were released between October 1st and 22nd. Major regular updates were released in large ...

Thank you for your hard work dealing with the recent string of vulnerabilities. It is difficult to stay calm when you have to ...

Explore the latest news, real-world incidents, expert analysis, and trends in Vulnerability — only on The Hacker News, the ...

IBM and Red Hat announced today they have identified and remediated more than 400 previously unknown vulnerabilities across popular Java libraries. Red Hat's Lightwell open-source software supply ...

Secure file-sharing software company Kiteworks has released security updates to address 126 vulnerabilities, including a max-severity flaw affecting its Email Protection Gateway (EPG) security ...

A simple but powerful prompt-injection vulnerability in a popular AI platform, Manus, could have opened the door for data theft and compromise —- and showcases the ongoing risk that users face from ...

AI labs are toying with an industry-wide pact to slow development. Meanwhile, widely available AI chatbots are already helping uncover a tidal wave of security flaws. A tidal wave of vulnerabilities ...

Apache Syncope has disclosed three important vulnerabilities that could allow privileged administrators to execute arbitrary SQL commands, bypass Groovy sandbox protections to inject code, and hijack ...

Threat actors linked to a China-aligned espionage group are exploiting a critical vulnerability (CVE-2026-51990) in Tencent’s Sogou Input Method for Windows to deploy the GrayRabbit backdoor.

git-mcp-server 2.15.1 contains an argument injection vulnerability in the ref and object parameters of git_log, git_diff, and git_show tools that lack leading-dash validation. Attackers can inject git ...