Midnight Mimosa infects Android firmware, spreading malware across 150+ countries and enabling stealthy app installs and ad ...

An IBM and Red Hat report says AI is making vulnerability discovery easier, but patch delays, limited maintainer resources ...

We're a long way from Kali Linux here, Toto. Grayware - software that behaves like malware without being technically malicious - is now blocked by default across Chainguard’s stack. There's a lot to ...

JAXB is a foundational open source implementation of XML binding in the Java ecosystem. It was included in the JDK through Java 8. Beginning with Java 11, applications that require JAXB need to obtain ...

Red Hat and IBM have identified and remediated more than 400 previously unknown vulnerabilities in widely used Java libraries through their Lightwell ...

A weakness in npm's trust model could let attackers publish updates to legitimate packages by claiming abandoned GitHub ...

Lightwell, the open-source security initiative set up by IBM and Red Hat, has identified more than 400 previously ...

The system managing enterprise firewalls was compromised through unauthenticated root access months before patches were available. Interlock ransomware weaponized the Java deserialization flaw 36 days ...

Four months after its launch, IBM and Red Hat’s Lightwell has remediated more than 400 previously unknown vulnerabilities in ...

IBM’s vulnerability discovery clearinghouse has found and fixed more than 400 vulnerabilities in popular Java libraries, the company announced on Tuesday. The Lightwell clearinghouse is also now ...

The companies say their Lightwell project fixed more than 400 flaws in Java libraries, but have not named affected packages or published a severity breakdown.