Government agencies use SBOMs to expose hidden risks, govern artificial intelligence tools and speed response to software vulnerabilities.

Apache Commons Text is used for processing character strings in Java apps. A critical vulnerability allows the injection of ...

Attackers are exploiting a Flight protocol validation failure that allows them to execute arbitrary code without ...

Software supply chain attacks are evolving as open source and AI-generated code introduce new third-party risks. Learn how ...

In a nod to the evolving threat landscape that comes with cloud computing and AI and the growing supply chain threats, Microsoft is broadening its bug bounty program to reward researchers who uncover ...

Ongoing vulnerable Log4j downloads suggest the supply chain crisis wasn't the wake-up call it should have been.

Sonatype has claimed that 13% of Log4j versions downloaded this year were vulnerable to the legacy critical Log4Shell bug ...

Critical vulnerability in React library should be treated by IT as they did Log4j - as an emergency, warns one expert. Developers using the React 19 library for building application interfaces are ...

Last year set a new record for newly-disclosed software vulnerabilities, with the total tally at around 40,000, an increase of some 30 percent from the year before. As 2025 is on track to set another ...

Google DeepMind has unveiled an AI-powered agent tool capable of automatically fixing critical software vulnerabilities. Dubbed CodeMender, the agentic AI solution can apparently "instantly" patch new ...