That old Java icon had a much bigger résumé than I gave it credit for.

This week, it's PHP, Node.js, and JavaSecurity topics have been continuing this week. I've written about PHP and Node.js, and ...

BRONZE SANDCASTLE abuses legitimate Windows apps to load encrypted backdoors, collect system information and steal Active ...

Microsoft observed ClickFix attacks using browser cache smuggling to execute cached VBScript and launch a credential-targeting malware chain.

Hackers are exploiting two flaws in AhsayCBS backup servers to run commands, plant webshells, and install XMRig ...

Building your own mobile or desktop native app sounds exciting. More importantly, native apps have some clear advantages. That said, starting with web apps will score you some easy wins and prepare ...

In this blog, Arctic Wolf Labs analyzes PHP2Shell (CVE-2026-109618 and CVE-2026-109619) and discusses active exploitation ...

Thank you for your hard work dealing with the recent string of vulnerabilities. It is difficult to stay calm when you have to ...

The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat actors to resume ...

Threat actors are actively exploiting two vulnerabilities, one critical and one medium-severity, in the AhsayCBS backup ...

It has been a little more than a month since WSL 3.0.1 came out, and it's already changing the way I run my Linux containers.

TornadoVM, an open-source heterogeneous programming framework for Java has reached version 7.0. It automatically accelerates ...