Tag: Programming Languages
-
Java library vulnerabilities: IBM and Red Hat fix 400+ previously unknown flaws
IBM and Red Hat have found and fixed more than 400 previously unknown vulnerabilities in widely used Java libraries through Lightwell, …
-
CVE-2026-67989 (ruby_llm): Polynomial-Time Regular Expression Denial of Service (ReDoS) vulnerability
Originally appeared on RubySec. crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a polynomial-time regular …
-
North Korea’s job interview scam runs both ways
Attackers are targeting members of the Rust Project and maintainers of widely used crates (Rust code libraries), dangling attractive …
-
vlt 1.0 Ships as a Drop-in npm Replacement with Phased Installs, Graph Queries, and Malware-Blocking
vlt, the JavaScript package manager and registry built by the original creators of npm, has released vlt 1.0, shipping as a drop-in npm …
-
Security advisories: CVE-2026-80212 and CVE-2026-80213
Posted by hsbt on 27 Aug 2026 Two vulnerabilities have been discovered in the gem bundled with Ruby. They have been assigned the CVE …
-
Hackers poison popular Rust crates to steal developers’ credentials
Hackers slipped malware into several popular Rust packages this week, turning routine software builds into a route onto developers’ …
-
North Korean Hackers Tied to Rust Supply Chain Attack
Wiz security researchers have linked a recent software supply chain attack which targeted the Rust programming ecosystem to state-sponsored …
-
Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads
The Rust Project has deleted malicious versions of three widely used Rust crates from crates.io after a compromised maintainer account …
-
KindaRails2Shell threatens Ruby on Rails apps (CVE-2026-66066)
A critical security vulnerability (CVE-2026-66066) in Ruby on Rails (aka Rails), one of the most widely used frameworks for building …
-
HollowFrame Loader Uses Fake Python DLL to Evade Defender
A previously undocumented loader framework has been found disguising Go code inside a counterfeit Python runtime, after first instructing …
-
Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install
Version 8.14.0 of the jscrambler npm package shipped with a malicious preinstall hook that silently drops and runs a native infostealer …
-
INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023
Cybersecurity researchers have charted the evolution of INC from an nascent ransomware-as-a-service (RaaS) operation to one of the most …
●●●