The establishment of the Open Source Endowment (OSE), a fund to support open source projects, was announced on February 27, 2026. OSE was launched as 'the world's first endowment-based fund for open ...

After all the hype in December last year, threat actors appear to have lost interest in exploiting the Log4Shell vulnerability, as both Sophos and the SANS Internet Storm Center are reporting ...

The flaw uncovered late last year in the widely-used Log4j Java library will remain a danger for many years to come, the independent body charged with investigating the global incident said Thursday.

It came to our attention that the Java application blocker is prompting that self-assigned or untrusted applications have been blocked due to security settings. Due to this issue, some of the ...

Abstract: In today’s digital landscape, the widespread utilization of the Java library Log4j for storing error messages in applications is prevalent. However, a ...

Organizations that adopt technology for their business must carefully tread the path of managing the risk (e.g., financial, reputational, operational, legal) associated with vulnerabilities. However, ...

The Java security specialists at Dublin-based Waratek have released a new Log4J Vulnerability Scanner and added API security to their Java Security Platform, the company announced recently. The ...

The beam-vendor-calcite-1_28_0 contains a bunch of shaded dependencies with major security vulnerabilities. For example, log4j:1.2.17 and protobuf-java:3.19.2. Are there any plans to upgrade the ...

This week, Google launched a free API service that provides software developers with dependency data and security-related information on over 5 million software components across different programming ...