Free and open-source digital audio manipulation project Audacity has recently issued an updated privacy notice leaving many Audacity users concerned. The notice published July 2nd,... Read More
open source
Google has open-sourced its Fully Homomorphic Encryption toolkit that is especially useful for healthcare developers.... Read More
Attackers who breached Codecov for over 2 months also reportedly hacked into hundreds of networks. The full extent of this incident is yet to unfold in the upcoming weeks.... Read More
Shedding light on mysterious 9000.0.x versions of PrismJS that had left everyone puzzled in 2015, and weren't removed until 2019.... Read More
The Git project has released patches for a severe remote code execution (RCE) vulnerability, CVE-2021-21300 that can be exploited by attackers when their malicious repos are cloned.... Read More
A critical vulnerability CVE-2021-24171 in WooCommerce Upload Files plugin can be exploited through multiple routes like double extension and path traversal attacks.... Read More
A gray hat hacker has published over 7,000 dependency confusion packages to npm and PyPI repositories, and continues to post thousands more, in real time.... Read More
This week, the source code of CMA, a software provider relied on by leading central banks across nations and stock exchanges has been exposed online.... Read More
Newly discovered Discord malware "CursedGrabber" has possible links to Russia and Ukraine. It was found infiltrating the npm open source registry.... Read More
Sonatype releases Advanced Development Pack with next-gen DevSecOps intelligence
Fulton, MD – Sonatype, the company that scales DevOps through open source governance and software supply chain automation, today unveils its breakthrough Advanced Development Pack that... Read More
Share this: