Skip to content

Breaking

Attackers Hijack Staples and Dell Order Notifications for Voice Phishing
aiohttp multipart requests cause unbounded file descriptor retention in versions up to 3.14.3
Eclipse ioFog WebSocket Authentication Bypass Leaves Admin Control Unprotected in Unpatched Versions
Argo CD JSONnet Flaw Risks Server Crash and File Read for Low-Priv Users Up to 3.6.0
Argo CD Kustomize Injection Bug Lets Read-Only Users Run Code on Repo Servers
PHP Remote Code Execution Flaws Rated 9.2 Trigger Emergency Patch Plan
Attackers Hijack Staples and Dell Order Notifications for Voice Phishing
aiohttp multipart requests cause unbounded file descriptor retention in versions up to 3.14.3
Eclipse ioFog WebSocket Authentication Bypass Leaves Admin Control Unprotected in Unpatched Versions
Argo CD JSONnet Flaw Risks Server Crash and File Read for Low-Priv Users Up to 3.6.0
Argo CD Kustomize Injection Bug Lets Read-Only Users Run Code on Repo Servers
PHP Remote Code Execution Flaws Rated 9.2 Trigger Emergency Patch Plan

devsecops

Everything RedTeam Tribune has reported about devsecops: 2 stories, newest first. Part of our Vulnerabilities coverage.

16 Oct
Vulnerabilities

GitHub Actions Workflow Injection Prevention Checklist

Dynamic context parsing in automation workflows allows attackers to execute arbitrary commands through pull request titles, creating a silent backdoor in your build pipeline that bypasses standard input validation.

09 Oct
Cloud Security

DevSecOps Explained: Why Security Must Live in the Code Pipeline

Embedding security checks directly into your deployment pipeline prevents vulnerabilities from becoming expensive production failures later.