Software Security RSS Feeds

Directory15 software security feeds · 82 articlesShow all languages →

Latest

Software Security articles

Why fetching dependencies directly from VCS is more secure than centralized package registries

I’ve been writing Ruby at my new $dayjob in the last month. After spending most of the last decade writing Go it’s been a fun change of scenery. I did Ruby before (years ago) and I can’t really tell you which is “better” – Ruby is very different from Go i

Opiniontechnologyprogrammingdependency management

arp242.net·Hacker News: Front Page·11d ago·6 min read

Notepad++ Update Infrastructure Compromised by State-Sponsored Hackers

Newstechnologycybersecurity

notepad-plus-plus.org27d ago

Microsoft acknowledges RoguePlanet zero-day exploit targeting Defender privilege escalation (CVE-2026-50656)

Newstechnologycybersecurity

Shared by @helpnetsecurity.com ↗

helpnetsecurity.com29d ago

Active root-level attacks target Cisco Catalyst SD-WAN Manager and cPanel LiteSpeed plugin

Newstechnologycybersecurity

Shared by @heiseonlineenglish.bsky.social ↗

heise.de1mo ago

ShinyHunters actively exploiting critical Oracle PeopleSoft vulnerability; CISA adds to known exploited list

The criminal group ShinyHunters is attacking the critical security vulnerability in Oracle PeopleSoft that became known over the weekend.

Newstechnologycybersecuritynews

heise.de·Tech by Flipboard·1mo ago·2 min read

Survey: 70% of developers say AI code has more vulnerabilities, 30% ship it anyway

Pressure to deploy wins out over security as four in five orgs confess to breaches from vulnerable apps

Newstechnologyprogrammingsoftware security

theregister.com·Tech by Flipboard·1mo ago·3 min read

rscrypto v0.4.0: Runtime Verification of Constant-Time Cryptographic Behavior

Every cryptography library says it's secure and performant. Very few can explain how that security...

Insighttechnologyprogrammingcryptography

dev.to·Tech by Flipboard·1mo ago·12 min read

Google patches fifth Chrome zero-day of 2026 exploited in the wild

Newstechnologycybersecurity

Shared by @infosecbriefly.bsky.social ↗

briefly.co1mo ago

Google Patches Fifth Chrome Zero-Day of 2026 with CVE-2026-11645 Fix

Newstechnologycybersecurity

Shared by @infosecbriefly.bsky.social ↗

briefly.co1mo ago

Active exploitation of SolarWinds Serv-U DoS vulnerability disrupts critical file transfers

Newstechnologycybersecurity

Shared by @heiseonlineenglish.bsky.social ↗

heise.de1mo ago

Two Practical Guides on Building and Securing Production-Ready Enterprise AI Agents

technologyprogramming

Shared by @leanpub.bsky.social ↗

leanpub.com1mo ago

Oracle's First Monthly Security Patch Addresses 77 Vulnerabilities

Newstechnologycybersecurity

Shared by @infosecbriefly.bsky.social ↗

briefly.co1mo ago

Microsoft zero-day feud escalates as researcher threatens major exploit release on July 14

Newstechnologycybersecurity

Shared by @autom.bsky.social ↗

theregister.com1mo ago

Microsoft condemns uncoordinated Windows zero-day releases, researcher threatens further disclosures

Each vulnerability was published with working proof-of-concept code to the Microsoft-owned code repository GitHub, making them immediately available to both attackers and security professionals.

Newstechnologycybersecuritynews

therecord.media·Tech by Flipboard·1mo ago·4 min read

Microsoft criticizes uncoordinated disclosure of six zero-day vulnerabilities

Newstechnologycybersecurity

Shared by @infosecbriefly.bsky.social ↗

briefly.co1mo ago

Microsoft threatens legal action over unpatched Windows zero-day disclosures

Newstechnologycybersecurity

Shared by @heiseonlineenglish.bsky.social ↗

heise.de1mo ago

AI discovers 271 Firefox vulnerabilities, signaling security debt repayment

Newstechnologycybersecurity

Shared by @twit.tv ↗

twit.tv1mo ago

Python Supply Chain Security: Risks and Mitigations After pip install

Insighttechnologyprogramming

medium.com1mo ago

docs.tenable.com11

Checkmarx4

Why fetching dependencies directly from VCS is more secure than centralized package registries

Notepad++ Update Infrastructure Compromised by State-Sponsored Hackers

Microsoft acknowledges RoguePlanet zero-day exploit targeting Defender privilege escalation (CVE-2026-50656)

Active root-level attacks target Cisco Catalyst SD-WAN Manager and cPanel LiteSpeed plugin

ShinyHunters actively exploiting critical Oracle PeopleSoft vulnerability; CISA adds to known exploited list

Survey: 70% of developers say AI code has more vulnerabilities, 30% ship it anyway

rscrypto v0.4.0: Runtime Verification of Constant-Time Cryptographic Behavior

Google patches fifth Chrome zero-day of 2026 exploited in the wild

Google Patches Fifth Chrome Zero-Day of 2026 with CVE-2026-11645 Fix

Active exploitation of SolarWinds Serv-U DoS vulnerability disrupts critical file transfers

Two Practical Guides on Building and Securing Production-Ready Enterprise AI Agents

Oracle's First Monthly Security Patch Addresses 77 Vulnerabilities

Microsoft zero-day feud escalates as researcher threatens major exploit release on July 14

Microsoft condemns uncoordinated Windows zero-day releases, researcher threatens further disclosures

Microsoft criticizes uncoordinated disclosure of six zero-day vulnerabilities

Microsoft threatens legal action over unpatched Windows zero-day disclosures

AI discovers 271 Firefox vulnerabilities, signaling security debt repayment

Python Supply Chain Security: Risks and Mitigations After pip install