RubyGems Open Source Supply Chain Security and OpenAI(rietta.com)

33 points by rietta 1 month ago | 4 comments

Microsoft has released software updates to plug at least 570 security holes(krebsonsecurity.com)

173 points by robin_reala 3 months ago | 107 comments

Ruby-SAML pwned by XML signature wrapping attacks(ssoready.com)

154 points by ucarion 2 years ago | 76 comments

CISA Admin Leaked AWS GovCloud Keys on GitHub(krebsonsecurity.com)

433 points by LelouBil 5 months ago | 171 comments

KrebsOnSecurity article reporting that a CISA contractor kept a public GitHub repository exposing privileged AWS GovCloud credentials and internal CISA system details.

Remote code execution in OpenSSH’s forwarded SSH-agent(blog.qualys.com)

233 points by vitplister 3 years ago | 140 comments

CVE-2021-4440: A Linux CNA Case Study(grsecurity.net)

64 points by __bjoernd 2 years ago | 6 comments