Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Search

News

APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits via The Hacker News
Malicious cPGuard Updates Served in OpsShield Supply Chain Attack via SecurityWeek
Rust-proof your code with our new Testing Handbook chapter via Trail of Bits Blog
Introducing Patch the Planet via Trail of Bits Blog
Evolution of Web3 in Cloud Supply Chain Attacks via Unit 42 (Palo Alto Networks)
Malicious Claude Code Extension Served in Cursor Supply Chain Attack via SecurityWeek
Cursor removes malicious Claude Code extension after SSH backdoor attempt via CSO Online
$2 Million+ Drained From Polymarket Traders in New Supply Chain Attack via SecurityWeek

Vulnerabilities

CVE-2026-61189 Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Cha...
CVE-2026-61186 Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Cha...
CVE-2026-61169 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security)...
CVE-2026-47009 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders,...
CVE-2020-8203 Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.
CVE-2026-101593 Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Orac...
CVE-2026-101474 Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Orac...
CVE-2026-101471 Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (co...

Tools

OWASP Dependency-Track