Vulnerability

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Marina Kovalchuk

Mar 21

Trivy Vulnerability Scanner Compromised in Supply Chain Attack: Mitigation Steps and User Guidance

#cybersecurity #supplychain #opensource #vulnerability

8 min read

Natalia Cherkasova

Mar 21

AI System's Internal Logic Exposed via Creative Querying: Enhanced Access Restrictions Proposed

#ai #security #llm #vulnerability

13 min read

Ksenia Rudneva

Mar 20

Claude Code CLI Vulnerability: Malicious Configs Bypass Trust Dialog, Enabling Unauthorized Permission Elevation

#security #vulnerability #cli #permissions

10 min read

Olga Larionova

Mar 21

Claude Code CLI Fixed: Configuration Loading Order Defect Resolved to Prevent Unauthorized Permission Elevation

#security #vulnerability #cli #ai

8 min read

Marina Kovalchuk

Mar 20

Trivy Scanner Compromised Again: Malicious Code Found in v0.69.4 and GitHub Actions, Raising Security Concerns

#security #supplychain #opensource #vulnerability

8 min read

victorstackAI

Mar 20

CVE-2025-9318: SQL Injection in Quiz and Survey Master — Full Audit

#wordpress #drupal #security #vulnerability

3 min read

Wu Long

Mar 19

Eight Critical Bugs, One Day: Anatomy of an AI Agent Security Audit

#security #aiagents #opensource #vulnerability

3 min read

Kunal

Mar 18

MediaTek Audio DSP Vulnerability: How a Nothing Phone Could Have Been Hacked (Except It Wasn't)

#cybersecurity #mediatek #androidsecurity #vulnerability

7 min read

Ksenia Rudneva

Mar 18

Windows Vulnerability CVE-2025-59284: Incomplete Patch Enables NetNTLM Hash Phishing During Archive Extraction

#windows #vulnerability #netntlm #patching

14 min read

Kunal

Mar 16

Glassworm Is Back: The Invisible Unicode Attack Hiding in Your Code

#cybersecurity #unicode #vulnerability #supplychainattack

7 min read

Kunal

Mar 14

Five Chrome Zero-Days in Two Weeks: The Most Aggressive Browser Attack Wave of 2024

#cybersecurity #googlechrome #zeroday #vulnerability

6 min read

ohmygod

Mar 12

CVE-2026-20435: How a MediaTek Boot Chain Flaw Exposes Crypto Wallets on 25% of Android Phones

#security #android #crypto #vulnerability

5 min read

Olga Larionova

Mar 13

Zombie ZIP Vulnerability Enables Malware to Bypass 95% of Antivirus Software, Requiring Urgent Security Updates

#cybersecurity #malware #vulnerability #antivirus

8 min read

Amartya Jha

Mar 12

EPSS Explained: Why Exploit Prediction Scoring Changes Everything for Vulnerability Prioritization

#security #vulnerability #devsecops #programming

2 min read

Amartya Jha

Mar 11

Denial of Service in yauzl 3.2.0: One Zip File Crashes the Library Behind VS Code and Electron

#security #javascript #node #vulnerability

5 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.

DEV Community

# vulnerability

Trivy Vulnerability Scanner Compromised in Supply Chain Attack: Mitigation Steps and User Guidance

AI System's Internal Logic Exposed via Creative Querying: Enhanced Access Restrictions Proposed

Claude Code CLI Vulnerability: Malicious Configs Bypass Trust Dialog, Enabling Unauthorized Permission Elevation

Claude Code CLI Fixed: Configuration Loading Order Defect Resolved to Prevent Unauthorized Permission Elevation

Trivy Scanner Compromised Again: Malicious Code Found in v0.69.4 and GitHub Actions, Raising Security Concerns

CVE-2025-9318: SQL Injection in Quiz and Survey Master — Full Audit

Eight Critical Bugs, One Day: Anatomy of an AI Agent Security Audit

MediaTek Audio DSP Vulnerability: How a Nothing Phone Could Have Been Hacked (Except It Wasn't)

Windows Vulnerability CVE-2025-59284: Incomplete Patch Enables NetNTLM Hash Phishing During Archive Extraction

Glassworm Is Back: The Invisible Unicode Attack Hiding in Your Code

Five Chrome Zero-Days in Two Weeks: The Most Aggressive Browser Attack Wave of 2024

CVE-2026-20435: How a MediaTek Boot Chain Flaw Exposes Crypto Wallets on 25% of Android Phones

Zombie ZIP Vulnerability Enables Malware to Bypass 95% of Antivirus Software, Requiring Urgent Security Updates

EPSS Explained: Why Exploit Prediction Scoring Changes Everything for Vulnerability Prioritization

Denial of Service in yauzl 3.2.0: One Zip File Crashes the Library Behind VS Code and Electron