Software Security RSS Feeds

Directory15 software security feeds · 83 articlesShow all languages →

Latest

Software Security articles

Replit launches Package Firewall to block malicious software packages during development

Replit already scans your projects for vulnerable dependencies, and audits your dependencies before you publish. But risk shows up earlier than that, while you are developing, the moment a malicious package gets installed. Today we're launching Package Fi

technologyprogrammingdevops

replit.com·Twitter AI·1d ago·4 min read

Why fetching dependencies directly from VCS is more secure than centralized package registries

I’ve been writing Ruby at my new $dayjob in the last month. After spending most of the last decade writing Go it’s been a fun change of scenery. I did Ruby before (years ago) and I can’t really tell you which is “better” – Ruby is very different from Go i

Opiniontechnologyprogramming

arp242.net12d ago

Notepad++ Update Infrastructure Compromised by State-Sponsored Hackers

Newstechnologycybersecurity

notepad-plus-plus.org28d ago

Microsoft acknowledges RoguePlanet zero-day exploit targeting Defender privilege escalation (CVE-2026-50656)

Newstechnologycybersecurity

Shared by @helpnetsecurity.com ↗

helpnetsecurity.com1mo ago

Active root-level attacks target Cisco Catalyst SD-WAN Manager and cPanel LiteSpeed plugin

Attackers are targeting Cisco Catalyst SD-WAN Manager and cPanel instances with the LiteSpeed plugin. However, attacks are not straightforward.

Newstechnologycybersecuritynews

heise.de·Tech by Flipboard·1mo ago·2 min read

ShinyHunters actively exploiting critical Oracle PeopleSoft vulnerability; CISA adds to known exploited list

The criminal group ShinyHunters is attacking the critical security vulnerability in Oracle PeopleSoft that became known over the weekend.

Newstechnologycybersecuritynews

heise.de·Tech by Flipboard·1mo ago·2 min read

Survey: 70% of developers say AI code has more vulnerabilities, 30% ship it anyway

Pressure to deploy wins out over security as four in five orgs confess to breaches from vulnerable apps

Newstechnologyprogrammingsoftware security

theregister.com·Tech by Flipboard·1mo ago·3 min read

rscrypto v0.4.0: Runtime Verification of Constant-Time Cryptographic Behavior

Insighttechnologyprogramming

Shared by @wasm.activitypub.awakari.com.ap.brid.gy ↗

dev.to1mo ago

Google patches fifth Chrome zero-day of 2026 exploited in the wild

Newstechnologycybersecurity

Shared by @infosecbriefly.bsky.social ↗

briefly.co1mo ago

Google Patches Fifth Chrome Zero-Day of 2026 with CVE-2026-11645 Fix

Newstechnologycybersecurity

Shared by @infosecbriefly.bsky.social ↗

briefly.co1mo ago

Active exploitation of SolarWinds Serv-U DoS vulnerability disrupts critical file transfers

Newstechnologycybersecurity

Shared by @heiseonlineenglish.bsky.social ↗

heise.de1mo ago

Two Practical Guides on Building and Securing Production-Ready Enterprise AI Agents

technologyprogramming

Shared by @leanpub.bsky.social ↗

leanpub.com1mo ago

Oracle's First Monthly Security Patch Addresses 77 Vulnerabilities

Newstechnologycybersecurity

Shared by @infosecbriefly.bsky.social ↗

briefly.co1mo ago

Microsoft zero-day feud escalates as researcher threatens major exploit release on July 14

Six 0-days, three under active exploitation, more to come on July 14?

Newstechnologycybersecuritynews

theregister.com·Hacker News: Front Page·1mo ago·7 min read

Microsoft condemns uncoordinated Windows zero-day releases, researcher threatens further disclosures

Newstechnologycybersecurity

Shared by @rmcholewa.bsky.social ↗

therecord.media1mo ago

Microsoft criticizes uncoordinated disclosure of six zero-day vulnerabilities

Newstechnologycybersecurity

Shared by @infosecbriefly.bsky.social ↗

briefly.co1mo ago

Microsoft threatens legal action over unpatched Windows zero-day disclosures

Newstechnologycybersecurity

Shared by @heiseonlineenglish.bsky.social ↗

heise.de1mo ago

AI discovers 271 Firefox vulnerabilities, signaling security debt repayment

Newstechnologycybersecurity

Shared by @twit.tv ↗

twit.tv1mo ago

docs.tenable.com11

Checkmarx4

Replit launches Package Firewall to block malicious software packages during development

Why fetching dependencies directly from VCS is more secure than centralized package registries

Notepad++ Update Infrastructure Compromised by State-Sponsored Hackers

Microsoft acknowledges RoguePlanet zero-day exploit targeting Defender privilege escalation (CVE-2026-50656)

Active root-level attacks target Cisco Catalyst SD-WAN Manager and cPanel LiteSpeed plugin

ShinyHunters actively exploiting critical Oracle PeopleSoft vulnerability; CISA adds to known exploited list

Survey: 70% of developers say AI code has more vulnerabilities, 30% ship it anyway

rscrypto v0.4.0: Runtime Verification of Constant-Time Cryptographic Behavior

Google patches fifth Chrome zero-day of 2026 exploited in the wild

Google Patches Fifth Chrome Zero-Day of 2026 with CVE-2026-11645 Fix

Active exploitation of SolarWinds Serv-U DoS vulnerability disrupts critical file transfers

Two Practical Guides on Building and Securing Production-Ready Enterprise AI Agents

Oracle's First Monthly Security Patch Addresses 77 Vulnerabilities

Microsoft zero-day feud escalates as researcher threatens major exploit release on July 14

Microsoft condemns uncoordinated Windows zero-day releases, researcher threatens further disclosures

Microsoft criticizes uncoordinated disclosure of six zero-day vulnerabilities

Microsoft threatens legal action over unpatched Windows zero-day disclosures

AI discovers 271 Firefox vulnerabilities, signaling security debt repayment