Oracle patches critical Java vulnerability CVE-2026-91403, rated 9.1. Check affected versions and learn how to secure Java applications.

IntroductionOver the past few days, there has been a series of reports regarding critical vulnerabilities. These affect "PHP, ...

There is a critical vulnerability in Oracle Java SE that allows for data theft and tampering. This news broke on the night of ...

Oracle’s CVE-2026-91403 alert stops Java SE and GraalVM trusting eight compromised eMudhra intermediate CA certificates.

Hackers are exploiting two flaws in AhsayCBS backup servers to run commands, plant webshells, and install XMRig cryptocurrency miners disguised as Microsoft Edge.

Attackers are exploiting two AhsayCBS flaws to deploy web shells and XMRig miners, and Huntress says version 10.3.4 remains vulnerable.

ShinyHunters-linked attackers exploit CVE-2026-35273 in Oracle PeopleSoft, bypassing WAF rules to deploy web shells on dozens ...

本内容遵循CC 4.0 BY-SA版权协议 RMI反序列漏洞——这几个词最近在Java技术社区里反复刷屏，不是因为新出了什么高危0day，而是因为它太“老”、太“典型”、太“容易被忽略”。我带过三届校招 ...

Three threat groups are exploiting two Cisco FMC flaws to steal credentials, gain root access and deploy Qilin ransomware. Cisco Talos says three separate threat groups are exploiting two recently ...

Improper handling of highly compressed data in Amazon ion-java before 1.12.1 might allow remote attackers to cause a denial of service via a crafted compressed Ion document that expands to an ...