Drupal patches two critical remote code execution flaws
Drupal has patched two critical remote code execution flaws that affect every currently supported version of its core, and the security team is tell…
Open Source
⚑ Сообщить о проблемеПоследние новости Open Source от Tech News
Все темы
AI
agents
ai
api
architecture
automation
backend
beginners
career
database
devchallenge
devops
discuss
javascript
linux
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
react
security
showdev
testing
tutorial
typescript
webdev
October Patch Tuesday fixes 1,413 CVEs, a record
Microsoft's October 2026 Patch Tuesday fixes 1,413 CVEs, the largest single security update it has ever shipped and a jump from September's 974. Eig…
When the AI Gateway Becomes the Weakest Link: Command Execution in LiteLLM's MCP Test Endpoints
When the AI Gateway Becomes the Weakest Link: Command Execution in LiteLLM's MCP Test Endpoints AI gateways have quietly become production infrastru…
Kestra's Path Suffix Bug: When a Framework Forgets to Check the Whole Route
Kestra's Path Suffix Bug: When a Framework Forgets to Check the Whole Route A patch released in June 2026 became an urgent remediation item in Septe…
Extended Support Isn't Extended Security: Managing Vulnerabilities in ELS Linux Environments
You have a Linux server. It is running an enterprise operating system. The operating system is still under vendor support. Your vulnerability scanne…
AI Is Finding Vulnerabilities Faster Than Humans Can Patch Them — And That’s Becoming a Security Crisis
For years, cybersecurity had one obvious problem: Finding vulnerabilities was difficult. Researchers had to inspect code, reproduce strange behavior…
One Console, Every Customer: What the N-able N-central Pre-Authentication RCE Says About RMM Concentration Risk
One Console, Every Customer: What the N-able N-central Pre-Authentication RCE Says About RMM Concentration Risk Remote monitoring and management pla…
The EU Cyber Resilience Act Reporting Duty Started on 11 September 2026: What Manufacturers Now Have to Do in 24 Hours
The EU Cyber Resilience Act Reporting Duty Started on 11 September 2026: What Manufacturers Now Have to Do in 24 Hours On 11 September 2026, Article…
PaperCut Zero-Day: Why 'Boring' Internal Apps Get Hit First
Attackers hit tools like PaperCut first because those tools are trusted, internet-facing more often than IT realizes, and almost never on anyone's p…