Business teams are vibe coding prototypes faster than anyone in security can count them, and those prototypes are at their ...
A critical Nextcloud CODE Server flaw allows unauthenticated remote command execution, with compromised servers reportedly ...
We're a long way from Kali Linux here, Toto. Grayware - software that behaves like malware without being technically malicious - is now blocked by default across Chainguard’s stack. There's a lot to ...
Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - ...
Chainguard Libraries now includes CVE remediation for JavaScript and Go; customers also receive protections from frontier ...
A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could ...
SlugFest flaw in npm Trusted Publishing exposed 1,500+ packages to takeover via reclaimed GitHub names, risking millions of ...
Security researchers uncovered a weakness in npm Trusted Publishing that could let attackers publish malicious releases ...
A slug flaw in npm Trusted Publishing exposed 1,500+ packages with 10m downloads. Bloom Security on what it means when AI ...
Two newly disclosed vulnerabilities in Discourse let unauthenticated attackers execute JavaScript against anonymous visitors ...
AI is evolving at a rapid pace, and the uptake of Generative AI (GenAI) is revolutionising the way humans interact and ...