Open Source Security Blog
SharePoint RCE zero-day CVE-2026-58644 has been added to CISA’s Known Exploited Vulnerabilities catalog after Microsoft confirmed exploitation in the wild. The flaw carries a CVSS 9.8 score and affects supported…
Critical security flaws in Firefox, Chrome, Adobe products, and VMware Avi Load Balancer received fresh patches this week, giving security teams another urgent update cycle across browsers, developer-facing platforms, commerce…
Microsoft July 2026 Patch Tuesday became a record-breaking security release, with reports counting 622 Microsoft vulnerabilities and 2 zero-days already exploited in active attacks. The most urgent fixes affect SharePoint…
SAP NetWeaver ABAP vulnerability CVE-2026-44747 is the headline issue in SAP’s July 2026 security updates. The flaw carries a CVSS 9.9 score and could allow an authenticated attacker to trigger…
How to read vulnerability scan report results becomes urgent right after the first scan finishes. The report says Critical, High, CVSS, Patch Available, Newly Detected, CVE ID, current version, fixed…
How to generate SBOM files depends on your stack, but the fastest answer for most teams is simple: install Syft, run one command against your project directory, and export CycloneDX…
Log4j vulnerability history changed how engineering teams think about open source risk. One Java logging library, one dangerous lookup feature, and one public proof of concept forced companies worldwide into…
AI application security vulnerabilities do not only come from prompt injection, model behavior, or unsafe agent actions. They also come from the Python packages, SDKs, vector database clients, document loaders,…
EU cyber resilience act software requirements are moving from legal text to engineering work. Teams selling software, connected products, hardware with software, or IoT devices into the EU now need…
A blackduck alternative becomes urgent when a team needs software composition analysis, SBOM support, and vulnerability monitoring, but cannot justify enterprise pricing or loses access after a divestiture. Black Duck…