The PHP project released emergency updates to address two critical "PHP2Shell" vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that allow unauthenticated remote code executio…
Dynatrace has expanded its Vulnerability Feed to include malicious package detection, allowing teams to distinguish between standard software vulnerabilities and intentional, activ…
CISA’s new Binding Operational Directive (BOD) 26-04 mandates that U.S. federal agencies transition from using static severity scores to a risk-based vulnerability prioritization m…
The emergence of AI models like Claude Mythos threatens to drastically accelerate the discovery and weaponization of zero-day vulnerabilities, rendering traditional static scanning…
TL;DR: A critical flaw in React’s Flight protocol (CVE-2025-55182) allows attackers to run code on servers using React Server Components. In short, if your organization uses React …