Amazon Redshift JDBC Driver Fixes a Remote-Code-Execution Risk
AWS says Amazon Redshift JDBC Driver 2.3.0 addresses unsafe class loading from connection parameters and credentials profile fields. Read More
GitHub Flags a Fresh Wave of Malicious npm Packages — What Maintainers Should Check
New GitHub Advisory Database entries mark several npm packages as malware with no patched versions, highlighting why dependency review must include package identity and provenance. Read More
Cloudflare Zero Wire Turns Critical Vulnerability Response Into a Shared Briefing
Cloudflare has introduced Zero Wire on Cloudflare Radar, a public vulnerability intelligence feed designed to connect critical vulnerability context with practical investigation steps. Read More
CrowdStrike’s AI Kill Switch Turns Agent Safety Into a Runtime Control
CrowdStrike has introduced an AI Kill Switch in Falcon Guardian, giving defenders a human-controlled way to stop unauthorized AI-agent activity at runtime. Read More
Zyxel’s GS1900 Advisory Shows Why ‘LAN-Only’ Still Matters
Zyxel’s November 3 advisory covers an out-of-bounds write in GS1900 switch firmware and shows why internal network exposure still deserves careful attention. Read More
Google and Partners Dismantle XCPE Botnet
Google Threat Intelligence Group says an industry takedown disrupted the XCPE backdoor and its network of more than 1.3 million set-top boxes. Read More