Software Security RSS Feeds

Directory15 software security feeds · 84 articlesShow all languages →

FeedBagel

Latest

Software Security articles

CISA orders federal agencies to patch actively exploited Ray RCE vulnerability within 3 days

Phishing, malvertising attacks could target devs to gain access to private corporate networks

Newstechnologycybersecuritynews

theregister.com·Tech by Flipboard·6h ago·3 min read

Replit launches Package Firewall to block malicious software packages during development

technologyprogramming

Shared by @Replit ↗

replit.com1mo ago

Why fetching dependencies directly from VCS is more secure than centralized package registries

I’ve been writing Ruby at my new $dayjob in the last month. After spending most of the last decade writing Go it’s been a fun change of scenery. I did Ruby before (years ago) and I can’t really tell you which is “better” – Ruby is very different from Go i

Opiniontechnologyprogramming

arp242.net1mo ago

Notepad++ Update Infrastructure Compromised by State-Sponsored Hackers

Newstechnologycybersecurity

notepad-plus-plus.org2mo ago

Microsoft acknowledges RoguePlanet zero-day exploit targeting Defender privilege escalation (CVE-2026-50656)

Microsoft has acknowledged the elevation of privilege Microsoft Defender bug (CVE-2026-50656) triggered via the "RoguePlanet" exploit.

Newstechnologycybersecuritynews

helpnetsecurity.com·Tech by Flipboard·2mo ago·3 min read

Active root-level attacks target Cisco Catalyst SD-WAN Manager and cPanel LiteSpeed plugin

Attackers are targeting Cisco Catalyst SD-WAN Manager and cPanel instances with the LiteSpeed plugin. However, attacks are not straightforward.

Newstechnologycybersecuritynews

heise.de·Tech by Flipboard·2mo ago·2 min read

ShinyHunters actively exploiting critical Oracle PeopleSoft vulnerability; CISA adds to known exploited list

The criminal group ShinyHunters is attacking the critical security vulnerability in Oracle PeopleSoft that became known over the weekend.

Newstechnologycybersecuritynews

heise.de·Tech by Flipboard·2mo ago·2 min read

Survey: 70% of developers say AI code has more vulnerabilities, 30% ship it anyway

Newstechnologyprogramming

Shared by @thinkitthrough.bsky.social ↗

theregister.com2mo ago

rscrypto v0.4.0: Runtime Verification of Constant-Time Cryptographic Behavior

Insighttechnologyprogramming

Shared by @wasm.activitypub.awakari.com.ap.brid.gy ↗

dev.to2mo ago

Google patches fifth Chrome zero-day of 2026 exploited in the wild

Newstechnologycybersecurity

Shared by @infosecbriefly.bsky.social ↗

briefly.co2mo ago

Google Patches Fifth Chrome Zero-Day of 2026 with CVE-2026-11645 Fix

Newstechnologycybersecurity

Shared by @infosecbriefly.bsky.social ↗

briefly.co2mo ago

Active exploitation of SolarWinds Serv-U DoS vulnerability disrupts critical file transfers

Newstechnologycybersecurity

Shared by @heiseonlineenglish.bsky.social ↗

heise.de2mo ago

Two Practical Guides on Building and Securing Production-Ready Enterprise AI Agents

technologyprogramming

Shared by @leanpub.bsky.social ↗

leanpub.com2mo ago

Oracle's First Monthly Security Patch Addresses 77 Vulnerabilities

Oracle launched a monthly Critical Security Patch Update covering 77 vulnerabilities, including dozen critical flaws, across five products with remote unauthenticated exploit fixes.

Newstechnologycybersecuritybusiness

briefly.co·Tech by Flipboard·2mo ago·1 min read

Microsoft zero-day feud escalates as researcher threatens major exploit release on July 14

Newstechnologycybersecurity

Shared by @autom.bsky.social ↗

theregister.com2mo ago

Microsoft condemns uncoordinated Windows zero-day releases, researcher threatens further disclosures

Newstechnologycybersecurity

Shared by @rmcholewa.bsky.social ↗

therecord.media2mo ago

Microsoft criticizes uncoordinated disclosure of six zero-day vulnerabilities

Newstechnologycybersecurity

Shared by @infosecbriefly.bsky.social ↗

briefly.co2mo ago

Microsoft threatens legal action over unpatched Windows zero-day disclosures

Newstechnologycybersecurity

Shared by @heiseonlineenglish.bsky.social ↗

heise.de2mo ago

docs.tenable.com11

Checkmarx4

CISA orders federal agencies to patch actively exploited Ray RCE vulnerability within 3 days

Replit launches Package Firewall to block malicious software packages during development

Why fetching dependencies directly from VCS is more secure than centralized package registries

Notepad++ Update Infrastructure Compromised by State-Sponsored Hackers

Microsoft acknowledges RoguePlanet zero-day exploit targeting Defender privilege escalation (CVE-2026-50656)

Active root-level attacks target Cisco Catalyst SD-WAN Manager and cPanel LiteSpeed plugin

ShinyHunters actively exploiting critical Oracle PeopleSoft vulnerability; CISA adds to known exploited list

Survey: 70% of developers say AI code has more vulnerabilities, 30% ship it anyway

rscrypto v0.4.0: Runtime Verification of Constant-Time Cryptographic Behavior

Google patches fifth Chrome zero-day of 2026 exploited in the wild

Google Patches Fifth Chrome Zero-Day of 2026 with CVE-2026-11645 Fix

Active exploitation of SolarWinds Serv-U DoS vulnerability disrupts critical file transfers

Two Practical Guides on Building and Securing Production-Ready Enterprise AI Agents

Oracle's First Monthly Security Patch Addresses 77 Vulnerabilities

Microsoft zero-day feud escalates as researcher threatens major exploit release on July 14

Microsoft condemns uncoordinated Windows zero-day releases, researcher threatens further disclosures

Microsoft criticizes uncoordinated disclosure of six zero-day vulnerabilities

Microsoft threatens legal action over unpatched Windows zero-day disclosures