Top

oss-supply-chain-scanner-cover-en-update

OSS Supply Chain Scanner — paste package.json, requirements.txt, pyproject.toml

2026.05.2752 views

kfc-nichirei-supply-chain-cover-en-update

SecurityInfrastructureJapanese Companies

KFC Japan: Shortages and Closures Across All Stores — Cause Is Unauthorized Access at Nichirei

2026.07.1589 views

Python 3.15: locale.getdefaultlocale Won't Be Removed, Plus Lazy Imports and What Breaks

Development

2026.06.17101 views

SecurityPrivacyDevelopment

Metabase CVE-2026-72898 (CVSS 10.0) Leaked Customer Data — Patch Now

2026.07.1064 views

本日の注目記事

vBulletin Forum Software Hit by Critical Flaw CVE-2026-61511: Unauthenticated Server Takeover

vBulletin, the forum software used by community sites worldwide, has a flaw (CVE-2026-61511, severity 9.8) that lets anyone take over the server without logging in. A working exploit was published on July 27, 2026, though no in-the-wild attacks have been confirmed. Versions up to 5.7.5 and 6.2.1 are affected; the fix is to update to 6.2.2 immediately.

2026.07.28311 views

oracle-peoplesoft-cve-2026-35273-unauth-rce-emergency-cover-en-update

SecurityInfrastructureGlobal Companies

ShinyHunters confirmed behind PeopleSoft CVE-2026-35273

Oracle has issued an emergency patch for CVE-2026-35273 (CVSS 9.8) in PeopleSoft, the HR and payroll system used by large enterprises, universities and governments. Without a login, an attacker can take over the server over the network and steal the personal data, salaries and bank accounts of all employees and students at once. It is a rare out-of-cycle response; affected PeopleTools 8.61 and 8.62 should be patched now.

2026.06.11100 views

localstack-github-archived-account-required-cover-en

Is LocalStack Still Free and Open Source? It Archived Its GitHub Repos and Now Requires an Account (2026)

AWS local emulator LocalStack archived its GitHub repos and now requires account authentication. The free tier remains for non-commercial use, but its OSS nature has fundamentally changed.

2026.03.29389 views

9Router default password 123456 (CVE-2026-63732): server takeover risk

9Router, a popular AI coding router, has critical flaws (CVE-2026-55500, 9.9) that leak all stored API keys and tokens, plus a 10.0 unauthenticated RCE. Update to v0.4.80+ and don't expose it to the internet.

AISecurityDevelopment

2026.07.11203 views

ubiquiti-unifi-bulletin-064-cover-en-update

UniFi hit by 25 flaws at once: cameras, door locks and routers

On July 2, 2026, networking brand UniFi disclosed 15 new vulnerabilities. Security cameras, door-access control, and routers are all in scope, and 6 can be exploited with no login. Earlier holes are already used in real attacks; we lay out the fixed version per product and the update steps to do first.

SecurityInfrastructure

2026.05.22301 views

VMware vCenter CVE-2026-59310 Exploited: Patch Now, No Workaround

CISA added VMware vCenter CVE-2026-59310 (CVSS 9.8) to KEV after 361 intrusions in 47 countries. No workaround — update to 8.0 U3k/U2f, 9.0.2.0100, 9.1.0.0300.

SecurityInfrastructure

2026.08.1973 views

今週の注目記事

vBulletin Forum Software Hit by Critical Flaw CVE-2026-61511: Unauthenticated Server Takeover

2026.07.28311 views

9Router default password 123456 (CVE-2026-63732): server takeover risk

AISecurityDevelopment

2026.07.11203 views

claude-desktop-linux-cowork-local-vm-kvm-cover-en

Claude Desktop Comes to Linux: Cowork Runs a Real VM Inside Your PC

Claude's desktop app now runs on Linux (Ubuntu/Debian). Cowork boots a VM inside your own PC, but Linux trips over a 'kvm' permission. Here's why, and the fix.

AILinuxDevelopment

2026.07.03224 views

AIGlobal CompaniesDevelopment

Claude Code blocks third-party model providers in 2026: what changed and how to work around it

On April 4, 2026, Anthropic cut off third-party tool access from Claude subscriptions. We break down why OpenClaw was blocked and clarify what's still allowed—official CLI, MCP, custom scripts—based on primary sources.

2026.04.06324 views

Is LocalStack Still Free and Open Source? It Archived Its GitHub Repos and Now Requires an Account (2026)

AWS local emulator LocalStack archived its GitHub repos and now requires account authentication. The free tier remains for non-commercial use, but its OSS nature has fundamentally changed.

2026.03.29389 views

SecurityInfrastructureGlobal Companies

ShinyHunters confirmed behind PeopleSoft CVE-2026-35273

2026.06.11100 views

月間注目記事

vBulletin Forum Software Hit by Critical Flaw CVE-2026-61511: Unauthenticated Server Takeover

2026.07.28311 views

9Router default password 123456 (CVE-2026-63732): server takeover risk

AISecurityDevelopment

2026.07.11203 views

AIGlobal CompaniesDevelopment

Claude Code blocks third-party model providers in 2026: what changed and how to work around it

2026.04.06324 views

Claude Desktop Comes to Linux: Cowork Runs a Real VM Inside Your PC

Claude's desktop app now runs on Linux (Ubuntu/Debian). Cowork boots a VM inside your own PC, but Linux trips over a 'kvm' permission. Here's why, and the fix.

AILinuxDevelopment

2026.07.03224 views

Is LocalStack Still Free and Open Source? It Archived Its GitHub Repos and Now Requires an Account (2026)

AWS local emulator LocalStack archived its GitHub repos and now requires account authentication. The free tier remains for non-commercial use, but its OSS nature has fundamentally changed.

2026.03.29389 views

uuid-v4-v7-bigint-primary-key-design-cover-en