This week's updates include a rebuilt GPU compiler in TornadoVM 8.0, vector database support in JNoSQL 1.2.0, and a release comparison tool from Quarkus. The JDK 28 early-access build, Endive 1.2.0, ...

Web apps are websites with app-like qualities or capabilities. Chromium supports "installing" a web app (or any website), which enables OS-level integration such as windowing, file handlers, protocol ...

Two new Java Cards reproduce the applet lifecycle and expose a T=0 transport bug. Hardware results, CPLC serials, regression ...

Google and industry partners have dismantled the XCPE backdoor and botnet, which was intentionally developed and operated by OEM Videostrong Technology Co. for financial gain.

Hirudo, an Android banking trojan detailed by the mobile threat intelligence team at ThreatFabric, removes a genuine banking app from an infected phone and installs a doctored copy that carries the ...

On October 20–21, 2026, important security information was released one after another for multiple pieces of software that ...

GoAhead can accept revoked client certificates on affected OpenSSL mutual-TLS builds despite configured revocation lists; ...

A malformed text message can silently crash Android’s telephony service and disconnect calls, including emergency calls.

ShinyHunters exploited three chained Oracle PeopleSoft flaws enabling unauthenticated server takeover, with attacks spanning ...

Is GraphQL right for your app? Discover where it saves time, where it adds complexity and how to decide when REST is the ...

GoAhead, the embedded web server behind the management pages of routers, printers, firewalls, and industrial controllers, has ...

Meta has introduced Zurp, an open-source toolkit that connects Burp Suite workflows with AI coding agents for approved bug bounty research.