Business teams are vibe coding prototypes faster than anyone in security can count them, and those prototypes are at their ...
We're a long way from Kali Linux here, Toto. Grayware - software that behaves like malware without being technically malicious - is now blocked by default across Chainguard’s stack. There's a lot to ...
Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - ...
Chainguard Libraries now includes CVE remediation for JavaScript and Go; customers also receive protections from frontier ...
A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could ...
Security researchers uncovered a weakness in npm Trusted Publishing that could let attackers publish malicious releases ...
A slug flaw in npm Trusted Publishing exposed 1,500+ packages with 10m downloads. Bloom Security on what it means when AI ...
An npm Trusted Publishing flaw let anyone claiming an abandoned GitHub repo name publish to 1,500+ packages. GitHub says it ...
A weakness in npm's trust model could let attackers publish updates to legitimate packages by claiming abandoned GitHub ...
Two newly disclosed vulnerabilities in Discourse let unauthenticated attackers execute JavaScript against anonymous visitors ...
AI is evolving at a rapid pace, and the uptake of Generative AI (GenAI) is revolutionising the way humans interact and ...
BLAKE3 beats SHA3-256 by up to 12x on throughput benchmarks, but SHA-3 keeps its FIPS 202 edge. Full specs, pricing, and ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results