The PHP project released emergency updates to address two critical "PHP2Shell" vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that allow unauthenticated remote code executio…
Dynattrace Security Researchers identified a high-severity zero-day vulnerability in Langflow (CVE-2026-34046) that allows authenticated users to unauthorizedly access, modify, or …
Koney is an open-source Kubernetes operator that automates cyber deception by deploying "honeytokens," or decoy files, across a cluster to catch attackers during unauthorized acces…
CISA’s new Binding Operational Directive (BOD) 26-04 mandates that U.S. federal agencies transition from using static severity scores to a risk-based vulnerability prioritization m…
Dynatrace Security Enrichment provides a unified platform to integrate various commercial, open-source, and proprietary threat intelligence sources through standardized HTTP-based …
Dynatrace has enhanced its Kubernetes Security Posture Management (KSPM) by embedding vulnerabilities, threats, and misconfigurations directly into its existing Kubernetes app to e…
The emergence of AI models like Claude Mythos threatens to drastically accelerate the discovery and weaponization of zero-day vulnerabilities, rendering traditional static scanning…
Dynatrace has enhanced its integration with GitHub Advanced Security to share runtime context—like internet exposure and sensitive data access—from monitored Kubernetes environment…
Dynatrace Security Posture Management (SPM) is now using the Common Configuration Scoring System (CCSS) to standardize how misconfiguration severity is assessed. This means misconf…
Dynatrace now integrates with Qualys to improve vulnerability management for DevSecOps teams. This integration unifies and deduplicates vulnerability findings from Qualys, then enr…
The new Findings tab in the Dynatrace Vulnerabilities app introduces a unified, analytics-ready view of all security findings across your Dynatrace environment and integrated tools…
TL;DR: A critical flaw in React’s Flight protocol (CVE-2025-55182) allows attackers to run code on servers using React Server Components. In short, if your organization uses React …