GitHub to devs: Now you’ll get security alerts on flaws in popular software libraries

Development platform GitHub has launched a new service that searches project dependencies in JavaScript and Ruby for known vulnerabilities and then alerts project owners if it finds any. The new service aims to help developers update project dependencies as soon as GitHub becomes aware of a newly announced vulnerability. Read more

GitHub to devs: Now you’ll get security alerts on flaws in popular software libraries Read More »

Oracle pushes emergency patch for critical Tuxedo server vulnerabilities

Scheduled security updates to resolve serious server vulnerabilities, some of which have achieved top severity ratings.On Thursday, ERPScan revealed the details of the vulnerabilities, which affect the Oracle application server Tuxedo. The company said that five bugs were found in total, and two of them received incredibly high CVSS ratings of 10.0 and 9.9. Read

Oracle pushes emergency patch for critical Tuxedo server vulnerabilities Read More »

​Google Home and Amazon Echo hit by big bad Bluetooth flaws

Google and Amazon have rolled out patches for their respective smart home speakers, Home and Echo, to plug the widespread Bluetooth flaws known as BlueBorne. BlueBorne, a set of eight Bluetooth flaws, was already known to affect billions of phones and computers running iOS, Android, Windows, and Linux. The flaws were discovered by security vendor

​Google Home and Amazon Echo hit by big bad Bluetooth flaws Read More »