CISA added Oracle WebLogic flaw CVE-2024-21182 to its KEV catalog, giving federal agencies until June 4 to patch exposed ...

Observability platform Dynatrace has made its Live Debugger generally available to developers, service providers and enterprises. First promoted at its partner and customer event in Las Vegas earlier ...

The change introduced in /usr/lib/rpm/macros in 1a9803d started causing the rpminspect test suite to fail for the debuginfo package tests. Looking in to it, I found that the duplicate __debug_package ...

Two malicious packages discovered on the npm package registry have been found to leverage GitHub to store Base64-encrypted SSH keys stolen from developer systems on which they were installed. Software ...

When Mike McGrath, Red Hat's Red Hat Core Platforms vice president, announced that Red Hat was putting new restrictions on who could access Red Hat Enterprise Linux (RHEL)'s code, other Linux ...

A threat actor by the name Lolip0p has uploaded three rogue packages to the Python Package Index (PyPI) repository that are designed to drop malware on compromised developer systems. The modules come ...

Keivan Beigi, the developer behind AppGet, is claiming that Microsoft has copied his idea. He claims that Microsoft was originally planning to hire him, but he suddenly never heard back. At Build ...