Threat actors are exploiting a vulnerability in Gitea’s reverse-proxy authentication mechanism to access internet-accessible instances by supplying only a valid username.

Sysdig detected attackers probing the CVSS 9.8 authentication bypass 13 days after the advisory, using one HTTP header to ...

Google and Microsoft pulled ModHeader after researchers found a dormant collector built to encrypt and upload up to 1,000 ...

CVE-2026-20896 lets reachable Gitea Docker containers trust spoofed X-WEBAUTH-USER headers when reverse proxy auth is enabled ...

AI agent payments gained open governance July 14, 2026: the Linux Foundation launched the x402 Foundation with 40 members ...

Hackers compromised the Injective Labs SDK project's GitHub repository and used it to publish a malicious package on the Node ...

Hackers are actively exploiting a critical vulnerability in the official Docker image for the Gitea self-hosted Git service ...

Many organizations assume that deploying CAPTCHA is enough to stop automated attacks.Yet security teams continue to encounter a frustrating reality: bots are st ...

Discovering indie films matters. One week it’s a basement-shot monster flick. Next week it’s a festival gem with no trailer ...

How we rebuilt Photon's shared iMessage routing to handle 10M+ messages a day — migrating Bun to Node, fixing a memory leak, ...

Bots now make up 57% of web traffic. Cloudflare Precursor watches whole sessions, not a single checkpoint, to tell humans from machines apart.

When a US-based startup came to us with an idea for a vending machine that could dispense anything from protein bars to gym ...