Vulnerability ManagementPython-socket.io module flaw lets attackers access business serversSteve ZurierOctober 27, 2025Security pros say teams that build apps in python-socket.io should patch right away.
Application securityWhen yesterday’s code becomes today’s threatBrian TrzupekOctober 21, 2025New npm supply chain attack exposes risks of outdated dependencies, highlighting need for real-time code risk alerts.
RansomwareNew Astaroth banking trojan leverages GitHub reposSteve ZurierOctober 13, 2025Malware uses public GitHub repos to store configuration files and redirection instructions.
DevSecOpsAlleged Huawei hack exposes internal source codeSC StaffOctober 9, 2025Cybernews reports that Huawei, the world's leading telecommunications equipment maker, had its data purportedly stolen and peddled on a hacking forum.
Application securityAttackers exploit XXS flaw in Zimbra Collaboration SuiteSteve ZurierOctober 7, 2025The attack leveraged a malicious iCalendar invite over Zimbra email.
Application securityCritical 9.9 Redis vulnerability enables remote code executionLaura FrenchOctober 6, 2025Crafted Lua scripts could be used to trigger a use-after-free flaw in affected instances.
Application securityHow to tame the wildest data security challengesElizabeth NammourOctober 1, 2025Data spreads fast across SaaS and AI tools — security must shift to automation, visibility, and culture.
