Page 9 - Apache Log News Today

The OpenSSL Project has patched two high-severity security flaws in its open-source cryptographic library used to encrypt communication channels and HTTPS connections.

New version to be released 1st November. Organisations should act now to track down OpenSSL 3.0.x in their infrastructure, warns Sonatype

Get a handle on essential software development best practices to achieve compliance and risk reduction before directives take effect. The post New government directives and persistent threats reinforce urgency of securing software appeared first on Application Security Blog.

The newly disclosed RCE bug stems from the insecure implementation of Commons Text's variable interpolation feature, but it is hard to exploit

Open-source software is everywhere, providing the backbone of the internet and offering long-lasting code for nearly every type of modern technology. But

Top-20 exploited vulnerabilities include 12 RCEs.

Unpatched systems, misconfigurations and vulnerable custom code are making SAP environments a top target for cyber attacks.

Unpatched systems, misconfigurations and vulnerable custom code are making SAP environments a top target for cyberattacks.

Organisations are struggling to keep up with ever-expanding cloud attack surfaces and increasing multicloud complexity, according to Orca Security.

Organizations are struggling to keep up with ever-expanding cloud attack surfaces and increasing multicloud complexity, according to Orca Security research.