An unpatched zero-day vulnerability in Gogs, a popular self-hosted Git service, has enabled attackers to gain remote code ...

Unpatched Gogs flaw CVE-2025-8110 enables file overwrite and code execution, driving over 700 confirmed compromises.

Threat actors have exploited a zero-day vulnerability in the Gogs self-hosted Git service to compromise over 700 internet-exposed instances.

You shouldn’t delay those Windows updates anymore. It patches one flaw hackers are already taking advantage of and two others they know about.

An attacker has been exploiting a zero-day vulnerability in Gogs, an open-source and popular Git service that allows for self ...

This week, likely North Korean hackers exploited React2Shell. The Dutch government defended its seizure of Nexperia. Prompt ...

Shopify, a leading commerce technology company, has unveiled its Winter ‘26 Edition, Renaissance, the eighth showcase of its latest products and innovations ...

A new Shai-Hulud 2.0 worm is attacking the software supply chain, compromising npm packages, CI/CD systems, and harvesting credentials across developer ecosystems.

The latest ThreatsDay Bulletin breaks down the week’s biggest stories — rootkits evading Windows, Docker leaks, AI risks and ...

A stealthy campaign with 19 extensions on the VSCode Marketplace has been active since February, targeting developers with ...

This report summarizes how the InfoQ Java editorial team and several Java Champions currently see the adoption of technology ...

A new campaign involving 19 malicious Visual Studio Code extensions used a legitimate npm package to embed malware in ...