Atlassian: Rovo Assistant Security Fix
Atlassian is the vendor of the Rovo assistant, which was subject to a one-click attack (RovoBlast) disclosed by Varonis. Atlassian fixed the…
Tag: security
EmeritOSS: A Retirement Home for Open Source Projects
EmeritOSS is a concept introduced in the article as a 'retirement home' for open source projects whose maintainers are no longer able…
Cisco Secure Firewall Management Center
Cisco Secure Firewall Management Center (FMC) is a centralized management platform for Cisco firewall appliances, offering policy management and threat monitoring.
Vercel AI SDK Harness Security Patches
Vercel patched authorization bypass vulnerabilities in the Codex and OpenCode harness packages, removing the process-path fallback and requiring exact one-time authorizations for…
Google ADK Vulnerabilities
Google's Agent Development Kit for Python had two vulnerabilities fixed in version 2.5.0: continuation forgery and resumable-mode bypass.
Oracle Database Targeted by khunt Toolkit
Oracle Database was the target of an attack where attackers used SQL injection to load Java code into the database, achieving code…
Semgrep: Static Analysis Security Tool
Semgrep is a static analysis security tool that documented similar Claude Code and VS Code hooks in an April compromise of the…
Microsoft Defender for Office 365
A cloud-based email and collaboration security service that provides mail-flow inspection and threat protection for Microsoft 365 environments.
Aikido: Security Platform for Developers
Aikido is a security platform that reported at least 868 packages affected by the npm worm and linked the campaign to the…
Gitea Patches Critical RCE in Version 1.27.1
Gitea, a popular open-source Git hosting platform, released version 1.27.1 to address CVE-2026-60004, a critical remote code execution vulnerability. The flaw could…