Every September, with metronomic regularity, we have a new version of the Java platform. One small point about timing is that the first release candidate [...]
LiteLLM has patched a privilege-escalation flaw that can let an authenticated internal user forge an administrative session and reach command-execution [...]
Apache’s September 30, 2026 advisory, CVE-2026-88789, warns that an XML document can make an affected Camel Quarkus application read files or contact [...]
The second Anthropic-linked vulnerability known to have been exploited in the wild saw initial activity from an IP address in China targeting vulnerable [...]
Knowing an application contains open source components is not the same as understanding the software and communities behind them.For many organizations, [...]
In part 1 of this series, we examined why enterprises need more than an inventory of the open source components in their software. Understanding where [...]