Organisations using Apache CXF have been urged to patch a newly disclosed LDAP injection flaw that could allow attackers to retrieve arbitrary certificates from vulnerable XKMS repositories, ...

Ever tried updating a security library across fifty different microservices on a Friday afternoon? It is a nightmare that usually ends in someone missing a patch and a massive headache for the ...

Platform affected: Java 4 and later. Bouncy Castle provides a secondary API for use with LDAP servers for doing certificate processing. Pre-1.84, using similar code to the problem code fixed by ...

The Spring Framework is possibly the most iconic software development framework of all time. It once suffered from a reputation of bloat, but it has long since shed that perception. The heart of ...

For many enterprises, there continue to be barriers to fully adopting and benefiting from agentic AI. IBM is betting the blocker isn't building AI agents but governing them in production. At its ...

Multiple Oracle security incidents have led to government agency guidance and class action suits in recent months. In January 2025, a significant security breach targeted Oracle Cloud, exploiting a ...

Oracle has finally acknowledged to some customers that attackers have stolen old client credentials after breaching a "legacy environment" last used in 2017, Bloomberg reported. However, while Oracle ...

A threat actor has reportedly breached Oracle Cloud infrastructure, exfiltrating six million sensitive authentication records and potentially endangering more than 140,000 enterprise customers. The ...

Oracle is denying a report that a hacker stole 6 million records from Oracle Cloud in an alleged attack that compromised a WebLogic zero-day flaw and may have affected more than 140,000 tenants.

Oracle denies it was breached after a threat actor claimed to be selling 6 million data records allegedly stolen from the company's Oracle Cloud federated SSO login servers. "There has been no breach ...