Source
PortSwigger
Now-patched RCE bug impacts dozens of DrayTek Vigor router models
Vulnerability has been patched in latest versions
Flaw that opened the door to cookie modification and data theft resolved
Harbor, Traefik, and Skipper projects tackle unsafe URL parsing methods
Bug Bounty Switzerland AG awarded program management contract
‘We believe that announcing vulnerabilities without a fix is the best solution for a difficult problem’
Evolution CMS, FUDForum, and GitBucket vulnerabilities chained for maximum impact
Security chief counts new build system and greater intel sharing among positive legacies of watershed cyber-attack
Security issue fixed in version 22.1.1 of file transfer software
Malicious builds and wider infrastructural compromise were worst-case scenarios