Google has stopped accepting product vulnerability reports through its bug bounty program for its open-source software. The change, in effect since October 1, means researchers can no longer submit ...

Horizon3.ai researchers used Anthropic's Mythos model to find a cryptographic weakness in Rejetto HTTP File Server (HFS), tracked as CVE-2026-61500. The flaw lets an unauthenticated attacker forge ...

Roundcube SQL injection CVE-2026-48842 is now being exploited in the wild, putting unpatched webmail servers at risk of ...

Authorizer, an open-source authentication server, lets AI assistants check users' permissions before they search company ...

Threat actors are actively exploiting a critical SQL injection vulnerability in Roundcube Webmail that can be triggered without authentication.

Google quietly gates Chromium Code Search behind a mandatory account login, restricting open lookups and sparking developer frustration.

CodeQL is the static analysis engine behind GitHub code scanning, which finds and remediates security issues in your code. We’ve recently released CodeQL 2.26.4, which adds support for Go 1.27, ...

Java idiomatic client for Cloud Spanner. The client application making API calls must be granted authorization scopes required for the desired Cloud Spanner APIs, and the authenticated principal must ...

A new threat intelligence report from Gambit Security has documented one of the clearest real-world examples yet of artificial intelligence being weaponized inside an active ransomware campaign.